Posted by user8446 on Jun 29, 2016; 8:42pm
URL: https://itus.accessinnov.com/Speed-issue-due-to-log-size-too-big-SOLUTION-tp189p1064.html

All you have to do is change:

output alert_fast: alert.fast

to....

output alert_fast: alert.fast 64K

You have to do this in both Snort7 and Snort8.