Re: [SLE] confirming logrotate has occured

From: Hylton Conacher (ZR1HPC) (hylton_at_global.co.za)
Date: 08/31/04

  • Next message: Hylton Conacher (ZR1HPC): "Re: [SLE] confirming logrotate has occured" 
    Date: Tue, 31 Aug 2004 13:05:27 +0200
To: SLE <suse-linux-e@suse.com>

    Patrick Shanahan wrote:
    > * Hylton Conacher (ZR1HPC) <hylton@global.co.za> [08-30-04 04:02]:
    >
    >>How would I check, besides viewing the cron_daily etc scripts, that the
    >>logrotated had run and compressed any of my logs?
    > ...
    >
    >>P.S.: Anything besides 'man logrotate' Pat?
    >
    > :^)
    >
    > why not look at the config files for logrotate and see which files
    > should have compression/rotation performed, then display the
    > directories where those files exist? ie:
    >
    > partial view of /etc/logrotate.d/syslog
    >
    > /var/log/warn /var/log/messages /var/log/allmessages /var/log/localmessages /var/log/firewall {
    > compress
    > dateext
    > maxage 365
    > rotate 99
    > missingok
    > notifempty
    > size +4096k
    > create 640 root root
    > sharedscripts
    > postrotate
    > /etc/init.d/syslog reload
    > endscript
    > }
    >
    >
    > so logrotate/digest will perform on /var/log/warn, /var/log/messages....
    Thanks Pat. Now I see a little clearer on the log file issue. So if I
    wanted to add another system log file to be rotated like the ones
    already listed how do I decide on which I should just add into the
    /etc/logrotate.d/syslog file?

    > so on commandline or in your file browser of choice look in /var/log
    > for warn*
    >
    > In my system I see (abreviated):
    >
    > /var/log/warn
    > .....
    I got a fortune of wtmp.gz files that go way back to Jan 2004. I tried
    using OOo to view the ungzipped wtmp file but got 34 pages of rubbish.
    To get rid of the number of wtmp files held, where do I edit the
    'maxage' option as I do not see a /var/log/wtmp entry in the
    /var/log/syslog file. Should I rather edit the maxage of the
    /etc/logrotate.d/wtmp file??

    > so I may conclude that files are being condensed/compressed and rotated.
    >
    > Now, that wasn't so hard, was it? The thing to learn is not what was
    > done, but how it was approached.

    I have to admit with your explanation and a bit of man reading the log
    file rotation is a little clearer to me.

    :) Now it wasn't so hard, was it? To provide a substantial answer to my
    question as opposed to 'man logrotate', eventhough it was the ps answer. :)

    Thanks very much Pat

    > NOTE: The manner you posed your question deserved the *long*
    > explanation rather than the exemplary 'RTFM'.

    NOTE: The long manner you answered the question rather than the 'RTFM'
    was appreciated. 

    -- 
The Little Helper
========================================================================
Hylton Conacher - Linux user # 229959 at http://counter.li.org
Currently using SuSE 9.0 Professional with KDE 3.1
Licenced Windows user
========================================================================
-- 
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@suse.com
  • Next message: Hylton Conacher (ZR1HPC): "Re: [SLE] confirming logrotate has occured"