linux - Using logrotate with syslog-ng on raspberry pi (how to delete old logs?) -
ok..
i'm using raspberry pi syslog server cisco asa , cisco router.
i have logs being populated /var/log/network destination. being logged format: _$month$day$year.log, router or firewall device.
so far working great! i'm getting logs broken out day both router , firewall. problem i'm getting pretty big logs...pretty fast because of asa.
i'm new logrotate..so have far:
in /etc/logrotate.d/syslog-ng directory...
/var/log/network/*.log* { rotate 5 } for global options in logrotate.conf file:
admin@kylespi:/etc$ more logrotate.conf # see "man logrotate" details # rotate log files weekly weekly # keep 4 weeks worth of backlogs rotate 4 # create new (empty) log files after rotating old ones create # uncomment if want log files compressed #compress # packages drop log rotation information directory include /etc/logrotate.d # no packages own wtmp, or btmp -- we'll rotate them here /var/log/wtmp { missingok monthly create 0664 root utmp rotate 1 } /var/log/btmp { missingok monthly create 0660 root utmp rotate 1 } now...if try force logrotate run:
sudo logrotate /etc/logrotate.d -v instead of deleting files older 5 days (based on rotate 5 command)..i this:
admin@kylespi:/etc$ sudo ls /var/log/network firewall_03052014.log firewall_03072014.log firewall_03092014.log.1.1.1.1.1.1 firewall_03122014.log.1.1.1.1.1.1 firewall_03052014.log.1.1.1.1.1.1 firewall_03072014.log.1.1.1.1.1.1 firewall_03102014.log.1.1.1.1.1.1 router_03082014.log firewall_03062014.log firewall_03082014.log firewall_03112014.log.1.1.1.1.1.1 firewall_03062014.log.1.1.1.1.1.1 firewall_03082014.log.1.1.1.1.1.1 firewall_03122014.log
if helps, output "logrotate /etc/logrotate.d -v" command says following:
admin@kylespi:/etc/logrotate.d$ sudo logrotate /etc/logrotate.d/syslog-ng -v [sudo] password admin: reading config file /etc/logrotate.d/syslog-ng handling 1 logs rotating pattern: /var/log/network/*.log* 1048576 bytes (5 rotations) empty log files rotated, old logs removed considering log /var/log/network/firewall_03052014.log log not need rotating considering log /var/log/network/firewall_03052014.log.1.1.1.1.1 log needs rotating considering log /var/log/network/firewall_03062014.log log not need rotating considering log /var/log/network/firewall_03062014.log.1.1.1.1.1 log needs rotating considering log /var/log/network/firewall_03072014.log log not need rotating considering log /var/log/network/firewall_03072014.log.1.1.1.1.1 log needs rotating considering log /var/log/network/firewall_03082014.log log not need rotating considering log /var/log/network/firewall_03082014.log.1.1.1.1.1 log needs rotating considering log /var/log/network/firewall_03092014.log.1.1.1.1.1 log needs rotating considering log /var/log/network/firewall_03102014.log.1.1.1.1.1 log needs rotating considering log /var/log/network/firewall_03112014.log.1.1.1.1.1 log needs rotating considering log /var/log/network/firewall_03122014.log log not need rotating considering log /var/log/network/firewall_03122014.log.1.1.1.1.1 log needs rotating considering log /var/log/network/router_03082014.log log not need rotating rotating log /var/log/network/firewall_03052014.log.1.1.1.1.1, log->rotatecount 5 dateext suffix '-20140312' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' renaming /var/log/network/firewall_03052014.log.1.1.1.1.1.5 /var/log/network/firewall_03052014.log.1.1.1.1.1.6 (rotatecount 5, logstart 1, 5), old log /var/log/network/firewall_03052014.log.1.1.1.1.1.5 not exist renaming /var/log/network/firewall_03052014.log.1.1.1.1.1.4 /var/log/network/firewall_03052014.log.1.1.1.1.1.5 (rotatecount 5, logstart 1, 4), old log /var/log/network/firewall_03052014.log.1.1.1.1.1.4 not exist renaming /var/log/network/firewall_03052014.log.1.1.1.1.1.3 /var/log/network/firewall_03052014.log.1.1.1.1.1.4 (rotatecount 5, logstart 1, 3), old log /var/log/network/firewall_03052014.log.1.1.1.1.1.3 not exist renaming /var/log/network/firewall_03052014.log.1.1.1.1.1.2 /var/log/network/firewall_03052014.log.1.1.1.1.1.3 (rotatecount 5, logstart 1, 2), old log /var/log/network/firewall_03052014.log.1.1.1.1.1.2 not exist renaming /var/log/network/firewall_03052014.log.1.1.1.1.1.1 /var/log/network/firewall_03052014.log.1.1.1.1.1.2 (rotatecount 5, logstart 1, 1), old log /var/log/network/firewall_03052014.log.1.1.1.1.1.1 not exist renaming /var/log/network/firewall_03052014.log.1.1.1.1.1.0 /var/log/network/firewall_03052014.log.1.1.1.1.1.1 (rotatecount 5, logstart 1, 0), old log /var/log/network/firewall_03052014.log.1.1.1.1.1.0 not exist log /var/log/network/firewall_03052014.log.1.1.1.1.1.6 doesn't exist -- won't try dispose of renaming /var/log/network/firewall_03052014.log.1.1.1.1.1 /var/log/network/firewall_03052014.log.1.1.1.1.1.1 rotating log /var/log/network/firewall_03062014.log.1.1.1.1.1, log->rotatecount 5 dateext suffix '-20140312' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' renaming /var/log/network/firewall_03062014.log.1.1.1.1.1.5 /var/log/network/firewall_03062014.log.1.1.1.1.1.6 (rotatecount 5, logstart 1, 5), old log /var/log/network/firewall_03062014.log.1.1.1.1.1.5 not exist renaming /var/log/network/firewall_03062014.log.1.1.1.1.1.4 /var/log/network/firewall_03062014.log.1.1.1.1.1.5 (rotatecount 5, logstart 1, 4), old log /var/log/network/firewall_03062014.log.1.1.1.1.1.4 not exist renaming /var/log/network/firewall_03062014.log.1.1.1.1.1.3 /var/log/network/firewall_03062014.log.1.1.1.1.1.4 (rotatecount 5, logstart 1, 3), old log /var/log/network/firewall_03062014.log.1.1.1.1.1.3 not exist renaming /var/log/network/firewall_03062014.log.1.1.1.1.1.2 /var/log/network/firewall_03062014.log.1.1.1.1.1.3 (rotatecount 5, logstart 1, 2), old log /var/log/network/firewall_03062014.log.1.1.1.1.1.2 not exist renaming /var/log/network/firewall_03062014.log.1.1.1.1.1.1 /var/log/network/firewall_03062014.log.1.1.1.1.1.2 (rotatecount 5, logstart 1, 1), old log /var/log/network/firewall_03062014.log.1.1.1.1.1.1 not exist renaming /var/log/network/firewall_03062014.log.1.1.1.1.1.0 /var/log/network/firewall_03062014.log.1.1.1.1.1.1 (rotatecount 5, logstart 1, 0), old log /var/log/network/firewall_03062014.log.1.1.1.1.1.0 not exist log /var/log/network/firewall_03062014.log.1.1.1.1.1.6 doesn't exist -- won't try dispose of renaming /var/log/network/firewall_03062014.log.1.1.1.1.1 /var/log/network/firewall_03062014.log.1.1.1.1.1.1 rotating log /var/log/network/firewall_03072014.log.1.1.1.1.1, log->rotatecount 5 dateext suffix '-20140312' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' renaming /var/log/network/firewall_03072014.log.1.1.1.1.1.5 /var/log/network/firewall_03072014.log.1.1.1.1.1.6 (rotatecount 5, logstart 1, 5), old log /var/log/network/firewall_03072014.log.1.1.1.1.1.5 not exist renaming /var/log/network/firewall_03072014.log.1.1.1.1.1.4 /var/log/network/firewall_03072014.log.1.1.1.1.1.5 (rotatecount 5, logstart 1, 4), old log /var/log/network/firewall_03072014.log.1.1.1.1.1.4 not exist renaming /var/log/network/firewall_03072014.log.1.1.1.1.1.3 /var/log/network/firewall_03072014.log.1.1.1.1.1.4 (rotatecount 5, logstart 1, 3), old log /var/log/network/firewall_03072014.log.1.1.1.1.1.3 not exist renaming /var/log/network/firewall_03072014.log.1.1.1.1.1.2 /var/log/network/firewall_03072014.log.1.1.1.1.1.3 (rotatecount 5, logstart 1, 2), old log /var/log/network/firewall_03072014.log.1.1.1.1.1.2 not exist renaming /var/log/network/firewall_03072014.log.1.1.1.1.1.1 /var/log/network/firewall_03072014.log.1.1.1.1.1.2 (rotatecount 5, logstart 1, 1), old log /var/log/network/firewall_03072014.log.1.1.1.1.1.1 not exist renaming /var/log/network/firewall_03072014.log.1.1.1.1.1.0 /var/log/network/firewall_03072014.log.1.1.1.1.1.1 (rotatecount 5, logstart 1, 0), old log /var/log/network/firewall_03072014.log.1.1.1.1.1.0 not exist log /var/log/network/firewall_03072014.log.1.1.1.1.1.6 doesn't exist -- won't try dispose of renaming /var/log/network/firewall_03072014.log.1.1.1.1.1 /var/log/network/firewall_03072014.log.1.1.1.1.1.1 rotating log /var/log/network/firewall_03082014.log.1.1.1.1.1, log->rotatecount 5 dateext suffix '-20140312' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' renaming /var/log/network/firewall_03082014.log.1.1.1.1.1.5 /var/log/network/firewall_03082014.log.1.1.1.1.1.6 (rotatecount 5, logstart 1, 5), old log /var/log/network/firewall_03082014.log.1.1.1.1.1.5 not exist renaming /var/log/network/firewall_03082014.log.1.1.1.1.1.4 /var/log/network/firewall_03082014.log.1.1.1.1.1.5 (rotatecount 5, logstart 1, 4), old log /var/log/network/firewall_03082014.log.1.1.1.1.1.4 not exist renaming /var/log/network/firewall_03082014.log.1.1.1.1.1.3 /var/log/network/firewall_03082014.log.1.1.1.1.1.4 (rotatecount 5, logstart 1, 3), old log /var/log/network/firewall_03082014.log.1.1.1.1.1.3 not exist renaming /var/log/network/firewall_03082014.log.1.1.1.1.1.2 /var/log/network/firewall_03082014.log.1.1.1.1.1.3 (rotatecount 5, logstart 1, 2), old log /var/log/network/firewall_03082014.log.1.1.1.1.1.2 not exist renaming /var/log/network/firewall_03082014.log.1.1.1.1.1.1 /var/log/network/firewall_03082014.log.1.1.1.1.1.2 (rotatecount 5, logstart 1, 1), old log /var/log/network/firewall_03082014.log.1.1.1.1.1.1 not exist renaming /var/log/network/firewall_03082014.log.1.1.1.1.1.0 /var/log/network/firewall_03082014.log.1.1.1.1.1.1 (rotatecount 5, logstart 1, 0), old log /var/log/network/firewall_03082014.log.1.1.1.1.1.0 not exist log /var/log/network/firewall_03082014.log.1.1.1.1.1.6 doesn't exist -- won't try dispose of renaming /var/log/network/firewall_03082014.log.1.1.1.1.1 /var/log/network/firewall_03082014.log.1.1.1.1.1.1 rotating log /var/log/network/firewall_03092014.log.1.1.1.1.1, log->rotatecount 5 dateext suffix '-20140312' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' renaming /var/log/network/firewall_03092014.log.1.1.1.1.1.5 /var/log/network/firewall_03092014.log.1.1.1.1.1.6 (rotatecount 5, logstart 1, 5), old log /var/log/network/firewall_03092014.log.1.1.1.1.1.5 not exist renaming /var/log/network/firewall_03092014.log.1.1.1.1.1.4 /var/log/network/firewall_03092014.log.1.1.1.1.1.5 (rotatecount 5, logstart 1, 4), old log /var/log/network/firewall_03092014.log.1.1.1.1.1.4 not exist renaming /var/log/network/firewall_03092014.log.1.1.1.1.1.3 /var/log/network/firewall_03092014.log.1.1.1.1.1.4 (rotatecount 5, logstart 1, 3), old log /var/log/network/firewall_03092014.log.1.1.1.1.1.3 not exist renaming /var/log/network/firewall_03092014.log.1.1.1.1.1.2 /var/log/network/firewall_03092014.log.1.1.1.1.1.3 (rotatecount 5, logstart 1, 2), old log /var/log/network/firewall_03092014.log.1.1.1.1.1.2 not exist renaming /var/log/network/firewall_03092014.log.1.1.1.1.1.1 /var/log/network/firewall_03092014.log.1.1.1.1.1.2 (rotatecount 5, logstart 1, 1), old log /var/log/network/firewall_03092014.log.1.1.1.1.1.1 not exist renaming /var/log/network/firewall_03092014.log.1.1.1.1.1.0 /var/log/network/firewall_03092014.log.1.1.1.1.1.1 (rotatecount 5, logstart 1, 0), old log /var/log/network/firewall_03092014.log.1.1.1.1.1.0 not exist log /var/log/network/firewall_03092014.log.1.1.1.1.1.6 doesn't exist -- won't try dispose of renaming /var/log/network/firewall_03092014.log.1.1.1.1.1 /var/log/network/firewall_03092014.log.1.1.1.1.1.1 rotating log /var/log/network/firewall_03102014.log.1.1.1.1.1, log->rotatecount 5 dateext suffix '-20140312' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' renaming /var/log/network/firewall_03102014.log.1.1.1.1.1.5 /var/log/network/firewall_03102014.log.1.1.1.1.1.6 (rotatecount 5, logstart 1, 5), old log /var/log/network/firewall_03102014.log.1.1.1.1.1.5 not exist renaming /var/log/network/firewall_03102014.log.1.1.1.1.1.4 /var/log/network/firewall_03102014.log.1.1.1.1.1.5 (rotatecount 5, logstart 1, 4), old log /var/log/network/firewall_03102014.log.1.1.1.1.1.4 not exist renaming /var/log/network/firewall_03102014.log.1.1.1.1.1.3 /var/log/network/firewall_03102014.log.1.1.1.1.1.4 (rotatecount 5, logstart 1, 3), old log /var/log/network/firewall_03102014.log.1.1.1.1.1.3 not exist renaming /var/log/network/firewall_03102014.log.1.1.1.1.1.2 /var/log/network/firewall_03102014.log.1.1.1.1.1.3 (rotatecount 5, logstart 1, 2), old log /var/log/network/firewall_03102014.log.1.1.1.1.1.2 not exist renaming /var/log/network/firewall_03102014.log.1.1.1.1.1.1 /var/log/network/firewall_03102014.log.1.1.1.1.1.2 (rotatecount 5, logstart 1, 1), old log /var/log/network/firewall_03102014.log.1.1.1.1.1.1 not exist renaming /var/log/network/firewall_03102014.log.1.1.1.1.1.0 /var/log/network/firewall_03102014.log.1.1.1.1.1.1 (rotatecount 5, logstart 1, 0), old log /var/log/network/firewall_03102014.log.1.1.1.1.1.0 not exist log /var/log/network/firewall_03102014.log.1.1.1.1.1.6 doesn't exist -- won't try dispose of renaming /var/log/network/firewall_03102014.log.1.1.1.1.1 /var/log/network/firewall_03102014.log.1.1.1.1.1.1 rotating log /var/log/network/firewall_03112014.log.1.1.1.1.1, log->rotatecount 5 dateext suffix '-20140312' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' renaming /var/log/network/firewall_03112014.log.1.1.1.1.1.5 /var/log/network/firewall_03112014.log.1.1.1.1.1.6 (rotatecount 5, logstart 1, 5), old log /var/log/network/firewall_03112014.log.1.1.1.1.1.5 not exist renaming /var/log/network/firewall_03112014.log.1.1.1.1.1.4 /var/log/network/firewall_03112014.log.1.1.1.1.1.5 (rotatecount 5, logstart 1, 4), old log /var/log/network/firewall_03112014.log.1.1.1.1.1.4 not exist renaming /var/log/network/firewall_03112014.log.1.1.1.1.1.3 /var/log/network/firewall_03112014.log.1.1.1.1.1.4 (rotatecount 5, logstart 1, 3), old log /var/log/network/firewall_03112014.log.1.1.1.1.1.3 not exist renaming /var/log/network/firewall_03112014.log.1.1.1.1.1.2 /var/log/network/firewall_03112014.log.1.1.1.1.1.3 (rotatecount 5, logstart 1, 2), old log /var/log/network/firewall_03112014.log.1.1.1.1.1.2 not exist renaming /var/log/network/firewall_03112014.log.1.1.1.1.1.1 /var/log/network/firewall_03112014.log.1.1.1.1.1.2 (rotatecount 5, logstart 1, 1), old log /var/log/network/firewall_03112014.log.1.1.1.1.1.1 not exist renaming /var/log/network/firewall_03112014.log.1.1.1.1.1.0 /var/log/network/firewall_03112014.log.1.1.1.1.1.1 (rotatecount 5, logstart 1, 0), old log /var/log/network/firewall_03112014.log.1.1.1.1.1.0 not exist log /var/log/network/firewall_03112014.log.1.1.1.1.1.6 doesn't exist -- won't try dispose of renaming /var/log/network/firewall_03112014.log.1.1.1.1.1 /var/log/network/firewall_03112014.log.1.1.1.1.1.1 rotating log /var/log/network/firewall_03122014.log.1.1.1.1.1, log->rotatecount 5 dateext suffix '-20140312' glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]' renaming /var/log/network/firewall_03122014.log.1.1.1.1.1.5 /var/log/network/firewall_03122014.log.1.1.1.1.1.6 (rotatecount 5, logstart 1, 5), old log /var/log/network/firewall_03122014.log.1.1.1.1.1.5 not exist renaming /var/log/network/firewall_03122014.log.1.1.1.1.1.4 /var/log/network/firewall_03122014.log.1.1.1.1.1.5 (rotatecount 5, logstart 1, 4), old log /var/log/network/firewall_03122014.log.1.1.1.1.1.4 not exist renaming /var/log/network/firewall_03122014.log.1.1.1.1.1.3 /var/log/network/firewall_03122014.log.1.1.1.1.1.4 (rotatecount 5, logstart 1, 3), old log /var/log/network/firewall_03122014.log.1.1.1.1.1.3 not exist renaming /var/log/network/firewall_03122014.log.1.1.1.1.1.2 /var/log/network/firewall_03122014.log.1.1.1.1.1.3 (rotatecount 5, logstart 1, 2), old log /var/log/network/firewall_03122014.log.1.1.1.1.1.2 not exist renaming /var/log/network/firewall_03122014.log.1.1.1.1.1.1 /var/log/network/firewall_03122014.log.1.1.1.1.1.2 (rotatecount 5, logstart 1, 1), old log /var/log/network/firewall_03122014.log.1.1.1.1.1.1 not exist renaming /var/log/network/firewall_03122014.log.1.1.1.1.1.0 /var/log/network/firewall_03122014.log.1.1.1.1.1.1 (rotatecount 5, logstart 1, 0), old log /var/log/network/firewall_03122014.log.1.1.1.1.1.0 not exist log /var/log/network/firewall_03122014.log.1.1.1.1.1.6 doesn't exist -- won't try dispose of renaming /var/log/network/firewall_03122014.log.1.1.1.1.1 /var/log/network/firewall_03122014.log.1.1.1.1.1.1
try remove trailing asterisk:
from
/var/log/network/*.log* to
/var/log/network/*.log
Comments
Post a Comment