blob: 39da4065ba31d45d3bd4f315e24627d88ae5e217 (
plain) (
tree)
|
|
<!DOCTYPE html>
<html dir="ltr" lang="en">
<head>
<meta charset='utf-8'>
<title>1. Logrotate</title>
</head>
<body>
<h1 id="logrotate">1. Logrotate</h1>
<p><a href="https://fedorahosted.org/logrotate/">Logrotate</a>
allows automatic rotation, compression,
removal, and mailing of log files. Each log file may
be handled daily, weekly, monthly, or when it grows
too large. I have used Mikhail Kolesnik from openbunker,
use syslog-ng as example how to create package from now on.</p>
<pre>
$ sudo prt-get depinst logrotate
$ sudo vim /etc/logrotate.conf
</pre>
<pre>
IMPORTANTE
Preciso por o logrotate a comprimir apenas depois do
segundo ciclo para o samhain ficar feliz.
Thus log rotation will be handled gracefully as long
as the inode is kept (i.e. the old file is moved rather than copied)
and the first rotated file is not compressed (the logrotate tool can
be told to compress only after the second cycle, and on Debian this
seems to be standard anyway).
</pre>
<pre>
# see "man logrotate" for details
# rotate log files weekly
weekly
# keep 5 weeks worth of backlogs
rotate 5
# create new (empty) log files after rotating old ones
create
# uncomment this if you want your log files compressed
compress
olddir /var/log/old
notifempty
# some packages can drop log rotation information into
# this directory
include /etc/logrotate.d
# few generic files to rotate
/var/log/wtmp {
weekly
create 0644 root root
rotate 5
}
/var/log/btmp {
weekly
create 0600 root root
rotate 5
}
# system-specific logs may be also be configured here.
/var/log/faillog {
maxsize 5M
}
/var/log/lastlog {
maxsize 5M
}
/var/log/auth {
weekly
create 0644 root root
rotate 5
sharedscripts
postrotate
if [ -f /var/run/syslog-ng.pid ]; then \
kill -HUP `cat /var/run/syslog-ng.pid`; \
fi;
endscript
}
/var/log/cron {
weekly
create 0644 root root
rotate 5
sharedscripts
postrotate
if [ -f /var/run/syslog-ng.pid ]; then \
kill -HUP `cat /var/run/syslog-ng.pid`; \
fi;
endscript
}
/var/log/debug {
weekly
create 0644 root root
rotate 5
sharedscripts
postrotate
if [ -f /var/run/syslog-ng.pid ]; then \
kill -HUP `cat /var/run/syslog-ng.pid`; \
fi;
endscript
}
/var/log/kernel {
rotate 5
monthly
create 0644 root root
sharedscripts
postrotate
if [ -f /var/run/syslog-ng.pid ]; then \
kill -HUP `cat /var/run/syslog-ng.pid`; \
fi;
endscript
}
/var/log/messages {
rotate 5
weekly
create 0644 root root
sharedscripts
postrotate
if [ -f /var/run/syslog-ng.pid ]; then \
kill -HUP `cat /var/run/syslog-ng.pid`; \
fi;
endscript
}
/var/log/mail {
weekly
create 0644 root root
rotate 5
sharedscripts
postrotate
if [ -f /var/run/syslog-ng.pid ]; then \
kill -HUP `cat /var/run/syslog-ng.pid`; \
fi;
endscript
}
</pre>
<p>You can force logrotate to test configuration;</p>
<pre>
# logrotate -f /etc/logrotate.conf
</pre>
<p>This is part of the c9-doc Manual.
Copyright (C) 2016
c9 team.
See the file <a href="fdl-1.3-standalone.html">Gnu Free Documentation License</a>
for copying conditions.</p>
</body>
</html>
|