I am running MySql 3.23.58-1 on a snort database containing IDS alerts.
At 12:00am I would like move the previous day's alerts from four tables to 
a backup database named for the previous day.
Has anyone implemented such a backup schedule? And if so can someone 
send me a script?

I had the following ideas on the subject:
1.a. mysql shutdown.
   b. cp -r database /..../2004-07-29
   c. mysqlstart 
      /* I need a single user mode for the delete to work */
   d. echo "Delete iphdr; Delete tcphdr;Delete acid_event; Delete event"  | mysql -p 
xxx -u yyyy 
   e. go to multiuser mode.

2. a. Assuming logging turned on 
        mysqlhotcopy snortdb
        ( echo "Delete iphdr; Delete tcphdr;Delete acid_event; Delete event" ; 
mysqlbinlog snort.log ) | mysql -p xxx -u yyy

3.  a. $ mysql -p xxx -u yyy
        1.  if a week then  purge tables:
                $mysql> Delete iphdr;
         ....( repeat for the rest of the tables.)

       
        2.  mysql -p xxx -u yyy
        mysql > Select iphdr.*
                     from iphdr, event_id
                     into outfile /.../backup/2004-07-29/iphdr.txt
                     where timestamp.event_id < 2004-07-29;
         mysql> Delete iphdr;
         ....( repeat for the rest of the tables.)

        mysql > use backsnort_db
                     Select iphdr.*
                     from iphdr, event_id
                     Load infile /.../backup/2004-07-29/iphdr.txt
         ....( repeat for the rest of the tables.)

        mysql > exit
   
     b. tar cvf   backsnort_db

That is my best shot if anyone has a more elegant solution I would appreciate
hearing about it.

Thank you,
Raymond

Reply via email to