---
title: "[bojemoi] suricata: add eve-cleaner sidecar on manager for 24h log retention"
date: 2026-02-21T17:54:17+01:00
draft: false
tags: ["commit", "bojemoi", "main"]
categories: ["Git Activity"]
summary: "Commit cd5405c par Betty dans bojemoi"
author: "Betty"
---

## Commit `cd5405c`

| | |
|---|---|
| **Repository** | bojemoi |
| **Branch** | `main` |
| **Author** | Betty |
| **Hash** | `cd5405cabdfd0ef46abed984ace27aa9c752d755` |


### Description

Move log cleanup to 01-suricata-host.yml (standalone compose on manager)
instead of dozor stack (workers). eve-cleaner deletes rotated eve.*.json
older than 24h and truncates fast.log/stats.log > 200MB, runs hourly.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

### Files Changed

```
M	stack/01-suricata-host.yml
```

### Diff Summary

```
 stack/01-suricata-host.yml | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
```