# path to store flow data (will not be created if not exist!). # Dir must be writable by user, running daemon. STORE_PATH=/var/log/flow-capture # maximum data size (b,K,M,G multipliers allowed) MAX_STORE_SIZE=1G # how many times in day data will be rotated (95 RPD=every 15 min) ROTATIONS=95 # Nesting level: # The default is 0. # -3 YYYY/YYYY-MM/YYYY-MM-DD/flow-file # -2 YYYY-MM/YYYY-MM-DD/flow-file # -1 YYYY-MM-DD/flow-file # 0 flow-file # 1 YYYY/flow-file # 2 YYYY/YYYY-MM/flow-file # 3 YYYY/YYYY-MM/YYYY-MM-DD/flow-file NESTING_LEVEL=3 # compression ratio between 0 (no compression) and 9 (max. compression, slowest) COMPRESSION=4 # see flow-capture(1) for details about localip/remoteip/port LOCALIP=0 # default is to catch only self logs REMOTEIP=127.0.0.1 # port must match configured port of sensor PORT=5555 # add extra options here (added to end of flow-capture invocation line. see man (1) flow-capture) OPTIONS=''