1. Logrotate

Logrotate allows automatic rotation, compression, removal, and mailing of log files. Each log file may be handled daily, weekly, monthly, or when it grows too large. I have used Mikhail Kolesnik from openbunker, use syslog-ng as example how to create package from now on.

        $ sudo prt-get depinst logrotate
        $ sudo vim /etc/logrotate.conf
        
        IMPORTANTE

        Preciso por o logrotate a comprimir apenas depois do
        segundo ciclo para o samhain ficar feliz.

        Thus log rotation will be handled gracefully as long
            as the inode is kept (i.e. the old file is moved rather than copied)
            and the first rotated file is not compressed (the logrotate tool can
            be told to compress only after the second cycle, and on Debian this
            seems to be standard anyway).
        
        # see "man logrotate" for details
        # rotate log files weekly
        weekly

        # keep 5 weeks worth of backlogs
        rotate 5 

        # create new (empty) log files after rotating old ones
        create

        # uncomment this if you want your log files compressed
        compress

        olddir /var/log/old

        notifempty

        # some packages can drop log rotation information into 
        # this directory
        include /etc/logrotate.d

        # few generic files to rotate
        /var/log/wtmp {
            weekly
            create 0644 root root
            rotate 5
        }

        /var/log/btmp {
            weekly
            create 0600 root root
            rotate 5
        }

        # system-specific logs may be also be configured here.
        /var/log/faillog {
            maxsize 5M
        }

        /var/log/lastlog {
            maxsize 5M
        }

        /var/log/auth {
            weekly
            create 0644 root root
            rotate 5
            sharedscripts
            postrotate
            if [ -f /var/run/syslog-ng.pid ]; then \
                kill -HUP `cat /var/run/syslog-ng.pid`; \
            fi;
            endscript
        }

        /var/log/cron {
            weekly
            create 0644 root root
            rotate 5
            sharedscripts
            postrotate
            if [ -f /var/run/syslog-ng.pid ]; then \
                kill -HUP `cat /var/run/syslog-ng.pid`; \
            fi;
            endscript
        }

        /var/log/debug {
            weekly
            create 0644 root root
            rotate 5
            sharedscripts
            postrotate
            if [ -f /var/run/syslog-ng.pid ]; then \
                kill -HUP `cat /var/run/syslog-ng.pid`; \
            fi;
            endscript
        }

        /var/log/kernel {
            rotate 5
            monthly
            create 0644 root root
            sharedscripts
            postrotate
            if [ -f /var/run/syslog-ng.pid ]; then \
                kill -HUP `cat /var/run/syslog-ng.pid`; \
            fi;
            endscript
        }

        /var/log/messages {
            rotate 5
            weekly
            create 0644 root root
            sharedscripts
            postrotate
            if [ -f /var/run/syslog-ng.pid ]; then \
                kill -HUP `cat /var/run/syslog-ng.pid`; \
            fi;
            endscript
        }

        /var/log/mail {
            weekly
            create 0644 root root
            rotate 5
            sharedscripts
            postrotate
            if [ -f /var/run/syslog-ng.pid ]; then \
                kill -HUP `cat /var/run/syslog-ng.pid`; \
            fi;
            endscript
        }
        

You can force logrotate to test configuration;

        # logrotate -f /etc/logrotate.conf
        

This is part of the Hive System Documentation. Copyright (C) 2018 c9 team. See the file Gnu Free Documentation License for copying conditions.