pfSense, snort filling /var/log/snort/snort_

Clear logs doesn't work (for me at least).

If we do ls /var/log/snort/snort_<igb-number>/aler*
You will get a heavy list of items.

I deleted those:

rm /var/log/snort/snort_<igb-number/*alert.1234*
rm /var/log/snort/snort_<igb-number/*alert.1235*
.....
and so on

The file lists for rm to run /*alert* was to large, so i had to break down to more granular file filter, i.e. *alert.1234* to make it work. And run it a bunch of times.