Is it safe to nuke older log files? Some of our CA instances are on VMs
which were only allocated a reasonable amount of space for just running
FreeIPA, and this adds up fast. The ones on physical have space to spare
for some time yet, but some day it would be an issue for them too.
Is there a "best" way to control this? I know I can meddle with the
pki-tomcat config but I assume it's set to generate all this hilariously
verbose logging by default for a reason (or perhaps it's just an oversight
that FreeIPA doesn't set this to a sane production configuration?). Also, I
don't want to make a change then have it reverted by FreeIPA later...
Show replies by date