 | 1 | initial version |
Is there any method of pruning the tshark tmp file after the data has been sent to elasticsearch?
No. There is, at best, a method for discarding packets once more than a certain number have been written - the ring buffer option mentioned by @Jaap.
See bug 2743.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
