Hello everyone,
Is there a way to change the retention policy in terms of some of the log files or even files in general? I did my research and from what i can see its stored at "/etc/asl.conf" where from there a line indicates the below.
# Rules for /var/log/system.log
> system.log mode=0640 format=bsd rotate=seq compress file_max=5M all_max=50M
How have you all gone about editing this to include ttl=etc I want to make this change due to the CIS suggestion in Jamf Protect. What do you all think?
