Patrick Shanahan wrote:
* Hylton Conacher (ZR1HPC) <hylton@global.co.za> [08-30-04 04:02]:
How would I check, besides viewing the cron_daily etc scripts, that the logrotated had run and compressed any of my logs? ...
P.S.: Anything besides 'man logrotate' Pat?
:^)
why not look at the config files for logrotate and see which files should have compression/rotation performed, then display the directories where those files exist? ie:
partial view of /etc/logrotate.d/syslog
/var/log/warn /var/log/messages /var/log/allmessages /var/log/localmessages /var/log/firewall { compress dateext maxage 365 rotate 99 missingok notifempty size +4096k create 640 root root sharedscripts postrotate /etc/init.d/syslog reload endscript }
so logrotate/digest will perform on /var/log/warn, /var/log/messages.... Thanks Pat. Now I see a little clearer on the log file issue. So if I wanted to add another system log file to be rotated like the ones already listed how do I decide on which I should just add into the /etc/logrotate.d/syslog file?
so on commandline or in your file browser of choice look in /var/log for warn*
In my system I see (abreviated):
/var/log/warn ..... I got a fortune of wtmp.gz files that go way back to Jan 2004. I tried using OOo to view the ungzipped wtmp file but got 34 pages of rubbish. To get rid of the number of wtmp files held, where do I edit the 'maxage' option as I do not see a /var/log/wtmp entry in the /var/log/syslog file. Should I rather edit the maxage of the /etc/logrotate.d/wtmp file??
so I may conclude that files are being condensed/compressed and rotated.
Now, that wasn't so hard, was it? The thing to learn is not what was done, but how it was approached.
I have to admit with your explanation and a bit of man reading the log file rotation is a little clearer to me. :) Now it wasn't so hard, was it? To provide a substantial answer to my question as opposed to 'man logrotate', eventhough it was the ps answer. :) Thanks very much Pat
NOTE: The manner you posed your question deserved the *long* explanation rather than the exemplary 'RTFM'.
NOTE: The long manner you answered the question rather than the 'RTFM' was appreciated. -- The Little Helper ======================================================================== Hylton Conacher - Linux user # 229959 at http://counter.li.org Currently using SuSE 9.0 Professional with KDE 3.1 Licenced Windows user ========================================================================