Logrotate allows automatic rotation, compression, removal, and mailing of log files. Each log file may be handled daily, weekly, monthly, or when it grows too large. I have used Mikhail Kolesnik from openbunker, use syslog-ng as example how to create package from now on.
$ sudo prt-get depinst logrotate $ sudo vim /etc/logrotate.conf
IMPORTANTE Preciso por o logrotate a comprimir apenas depois do segundo ciclo para o samhain ficar feliz. Thus log rotation will be handled gracefully as long as the inode is kept (i.e. the old file is moved rather than copied) and the first rotated file is not compressed (the logrotate tool can be told to compress only after the second cycle, and on Debian this seems to be standard anyway).
# see "man logrotate" for details # rotate log files weekly weekly # keep 5 weeks worth of backlogs rotate 5 # create new (empty) log files after rotating old ones create # uncomment this if you want your log files compressed compress olddir /var/log/old notifempty # some packages can drop log rotation information into # this directory include /etc/logrotate.d # few generic files to rotate /var/log/wtmp { weekly create 0644 root root rotate 5 } /var/log/btmp { weekly create 0600 root root rotate 5 } # system-specific logs may be also be configured here. /var/log/faillog { maxsize 5M } /var/log/lastlog { maxsize 5M } /var/log/auth { weekly create 0644 root root rotate 5 sharedscripts postrotate if [ -f /var/run/syslog-ng.pid ]; then \ kill -HUP `cat /var/run/syslog-ng.pid`; \ fi; endscript } /var/log/cron { weekly create 0644 root root rotate 5 sharedscripts postrotate if [ -f /var/run/syslog-ng.pid ]; then \ kill -HUP `cat /var/run/syslog-ng.pid`; \ fi; endscript } /var/log/debug { weekly create 0644 root root rotate 5 sharedscripts postrotate if [ -f /var/run/syslog-ng.pid ]; then \ kill -HUP `cat /var/run/syslog-ng.pid`; \ fi; endscript } /var/log/kernel { rotate 5 monthly create 0644 root root sharedscripts postrotate if [ -f /var/run/syslog-ng.pid ]; then \ kill -HUP `cat /var/run/syslog-ng.pid`; \ fi; endscript } /var/log/messages { rotate 5 weekly create 0644 root root sharedscripts postrotate if [ -f /var/run/syslog-ng.pid ]; then \ kill -HUP `cat /var/run/syslog-ng.pid`; \ fi; endscript } /var/log/mail { weekly create 0644 root root rotate 5 sharedscripts postrotate if [ -f /var/run/syslog-ng.pid ]; then \ kill -HUP `cat /var/run/syslog-ng.pid`; \ fi; endscript }
You can force logrotate to test configuration;
# logrotate -f /etc/logrotate.conf
This is part of the Hive System Documentation. Copyright (C) 2018 c9 team. See the file Gnu Free Documentation License for copying conditions.