[KLUG Members] sysklogd

[Peter Buxton]

--qDbXVdCdHGoSgWSk
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable


A question for the great minds to ponder, Pinky:

My backup script, running 5 nights a week, produced minimal output and I
added a line to /etc/logrotate.conf to rotate it once a month, keeping
two copies as /var/log/backup.

Later, I changed the simple redirects, timestamped with the date(1)
command, to use logger to simplify it's use. I added local3 to
syslog.conf and associated it with /var/log/backup. Thereafter, the file
rotated (and now compressed) weekly. Changing logrotate.conf had no
effect.

Okay, now I I have it. syslogd maintains a fileopen call to all files
listed in syslog.conf. Once a day, cron(8) runs perl script
syslogd-listfiles. This program notes that only a file that accepts
'*.*' facility.priority pairs (that is, all of 'em) gets rotated daily
with savelog(8) script. Anything else is rotated once weekly (this seems
to be pretty much written in, without an /etc conf file).

logrotate only touches those files syslog *doesn't* keep: wtmp, utmp,
XFree86.0.log and various logs in /var/log/subdirs. I thought logrotate
did the whole rotation itself, guess I was quite wrong. I'm sure Adam
covered this, I must have just blanked on that 5 minute part of the
syslog presentation.

--=20
http://www.killdevil.org/~peter
Johnny Quest has two d-----s.

--qDbXVdCdHGoSgWSk
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9bGaKaAK8ZwqLoskRAl+eAKCjtMlqkA5aFGpCPE9edeR4cQjCvgCgqHiP
3YOqrWStq3CzbubyX/Ye0Qc=
=Yjpl
-----END PGP SIGNATURE-----

--qDbXVdCdHGoSgWSk--