A morning surprise: After I reset the / usr/ lib/ rsyslog /rsyslog-rotate fileto the original-version the content of kern.log, syslog and messages is almost identical. The syslog file seems to be rotated, but thesystem is writing to syslog.1 while the syslog-file has kern.log-content.Currently the content of the 3 files kern.log, syslog and messages is almost identical.
I tried to restart with systemtl restart rsyslogd.service = no effect journalctl --rotate = no effect syslog.1: May 19 06:59:01 debian64 CRON[865]: (daemon) CMD (test -x /usr/bin/debsecan && /usr/bin/debsecan --cron) May 19 07:00:01 debian64 CRON[880]: (root) CMD ( PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updatechecker local) May 19 07:00:01 debian64 CRON[881]: (www-data) CMD (php -f /var/www/nextcloud/cron.php) May 19 07:00:01 debian64 CRON[882]: (root) CMD (/root/check6tunnel.sh > /dev/null 2>&1) May 19 07:00:01 debian64 CRON[885]: (root) CMD (/root/checkfritzreboot.sh > /dev/null 2>&1) May 19 07:00:01 debian64 systemd[11441]: mnt-fritznas.mount: Succeeded. May 19 07:00:01 debian64 systemd[1]: mnt-fritznas.mount: Succeeded. May 19 07:00:01 debian64 systemd[607]: mnt-fritznas.mount: Succeeded. May 19 07:01:01 debian64 CRON[925]: (root) CMD (/root/checkipv6.sh > /dev/null 2>&1) May 19 07:02:01 debian64 CRON[1076]: (root) CMD (/root/checkwebmin.sh > /dev/null 2>&1) May 19 07:03:27 debian64 dhcpcd[383]: eth0: Router Advertisement from fe80::2e91:abff:123:e8b2 May 19 07:05:01 debian64 CRON[1120]: (www-data) CMD (php -f /var/www/nextcloud/cron.php) May 19 07:06:27 debian64 dhcpcd[383]: eth0: Router Advertisement from fe80::2e91:abff:123:e8b2 May 19 07:09:00 debian64 systemd[1]: Starting Clean php session files... May 19 07:09:00 debian64 systemd[1]: phpsessionclean.service: Succeeded. May 19 07:09:00 debian64 systemd[1]: Started Clean php session files. May 19 07:09:01 debian64 CRON[1286]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi) May 19 07:10:01 debian64 CRON[1415]: (root) CMD ( PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updatechecker local) May 19 07:10:01 debian64 CRON[1416]: (www-data) CMD (php -f /var/www/nextcloud/cron.php) May 19 07:15:01 debian64 CRON[1545]: (www-data) CMD (php -f /var/www/nextcloud/cron.php) May 19 07:16:16 debian64 dhcpcd[383]: eth0: Router Advertisement from fe80::2e91:abff:123:e8b2 May 19 07:17:01 debian64 CRON[1576]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) May 19 07:18:20 debian64 systemd[1]: Stopping System Logging Service... May 19 07:18:20 debian64 rsyslogd: [origin software="rsyslogd" swVersion="8.1901.0" x-pid="302" x-info="https://www.rsyslog.com";] exiting on signal 15. May 19 07:18:20 debian64 systemd[1]: rsyslog.service: Succeeded. May 19 07:18:20 debian64 systemd[1]: Stopped System Logging Service. May 19 07:18:20 debian64 systemd[1]: Starting System Logging Service... May 19 07:18:20 debian64 rsyslogd: imuxsock: Acquired UNIX socket '/run/systemd/journal/syslog' (fd 3) from systemd. [v8.1901.0] May 19 07:18:20 debian64 rsyslogd: [origin software="rsyslogd" swVersion="8.1901.0" x-pid="1593" x-info="https://www.rsyslog.com";] start May 19 07:18:20 debian64 systemd[1]: Started System Logging Service. May 19 07:20:01 debian64 CRON[1614]: (www-data) CMD (php -f /var/www/nextcloud/cron.php) May 19 07:20:01 debian64 CRON[1613]: (root) CMD ( PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updatechecker local) May 19 07:24:10 debian64 dhcpcd[383]: eth0: Router Advertisement from fe80::2e91:abff:123:e8b2 May 19 07:25:01 debian64 CRON[1810]: (www-data) CMD (php -f /var/www/nextcloud/cron.php) May 19 07:25:12 debian64 dhcpcd[383]: eth0: Router Advertisement from fe80::2e91:abff:123:e8b2 --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- syslog: May 19 00:30:01 debian64 kernel: [543701.990594] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 01:00:01 debian64 kernel: [545501.705868] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 02:30:01 debian64 kernel: [550902.133413] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 03:00:02 debian64 kernel: [552702.512337] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 05:00:01 debian64 kernel: [559902.394223] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 05:30:01 debian64 kernel: [561701.838038] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 07:00:01 debian64 kernel: [567102.215190] CIFS: Attempting to mount //fritz.box/fritz.nas/ -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- messages: May 18 16:22:24 debian64 rsyslogd: [origin software="rsyslogd" swVersion="8.1901.0" x-pid="14599" x-info="https://www.rsyslog.com";] start May 18 16:30:01 debian64 kernel: [514901.580595] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 17:00:01 debian64 kernel: [516701.925633] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 17:30:01 debian64 kernel: [518501.891890] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 18:00:01 debian64 kernel: [520301.157420] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 18:30:01 debian64 kernel: [522101.248592] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 19:00:01 debian64 kernel: [523901.729221] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 19:30:01 debian64 kernel: [525702.110778] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 20:00:01 debian64 kernel: [527501.974217] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 20:30:01 debian64 kernel: [529301.647548] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 21:00:01 debian64 kernel: [531101.407887] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 21:30:01 debian64 kernel: [532901.764003] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 22:00:01 debian64 kernel: [534701.509839] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 22:30:01 debian64 kernel: [536501.324256] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 23:00:01 debian64 kernel: [538301.911853] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 23:30:01 debian64 kernel: [540102.031432] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 00:00:01 debian64 kernel: [541901.851438] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 00:00:02 debian64 rsyslogd: [origin software="rsyslogd" swVersion="8.1901.0" x-pid="302" x-info="https://www.rsyslog.com";] rsyslogd was HUPed May 19 00:30:01 debian64 kernel: [543701.990594] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 01:00:01 debian64 kernel: [545501.705868] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 01:30:01 debian64 kernel: [547301.856370] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 02:00:01 debian64 kernel: [549102.097502] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 02:30:01 debian64 kernel: [550902.133413] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 03:00:02 debian64 kernel: [552702.512337] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 03:30:01 debian64 kernel: [554501.882812] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 04:00:01 debian64 kernel: [556302.449808] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 04:30:01 debian64 kernel: [558101.696441] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 05:00:01 debian64 kernel: [559902.394223] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 05:30:01 debian64 kernel: [561701.838038] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 06:00:01 debian64 kernel: [563502.613993] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 06:30:01 debian64 kernel: [565302.373313] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 07:00:01 debian64 kernel: [567102.215190] CIFS: Attempting to mount //fritz.box/fritz.nas/ ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- kern.log: May 18 15:30:01 debian64 kernel: [511301.317780] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 16:00:02 debian64 kernel: [513101.956118] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 16:30:01 debian64 kernel: [514901.580595] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 17:00:01 debian64 kernel: [516701.925633] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 17:30:01 debian64 kernel: [518501.891890] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 18:00:01 debian64 kernel: [520301.157420] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 18:30:01 debian64 kernel: [522101.248592] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 19:00:01 debian64 kernel: [523901.729221] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 19:30:01 debian64 kernel: [525702.110778] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 20:00:01 debian64 kernel: [527501.974217] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 20:30:01 debian64 kernel: [529301.647548] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 21:00:01 debian64 kernel: [531101.407887] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 21:30:01 debian64 kernel: [532901.764003] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 22:00:01 debian64 kernel: [534701.509839] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 22:30:01 debian64 kernel: [536501.324256] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 23:00:01 debian64 kernel: [538301.911853] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 18 23:30:01 debian64 kernel: [540102.031432] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 00:00:01 debian64 kernel: [541901.851438] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 00:30:01 debian64 kernel: [543701.990594] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 01:00:01 debian64 kernel: [545501.705868] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 01:30:01 debian64 kernel: [547301.856370] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 02:00:01 debian64 kernel: [549102.097502] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 02:30:01 debian64 kernel: [550902.133413] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 03:00:02 debian64 kernel: [552702.512337] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 03:30:01 debian64 kernel: [554501.882812] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 04:00:01 debian64 kernel: [556302.449808] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 04:30:01 debian64 kernel: [558101.696441] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 05:00:01 debian64 kernel: [559902.394223] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 05:30:01 debian64 kernel: [561701.838038] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 06:00:01 debian64 kernel: [563502.613993] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 06:30:01 debian64 kernel: [565302.373313] CIFS: Attempting to mount //fritz.box/fritz.nas/ May 19 07:00:01 debian64 kernel: [567102.215190] CIFS: Attempting to mount //fritz.box/fritz.nas/ ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- systemctl status rsyslog.service say: ● rsyslog.service - System Logging Service Loaded: loaded (/lib/systemd/system/rsyslog.service; enabled; vendor preset: enabled) Active: active (running) since Wed 2021-05-12 17:27:41 CEST; 6 days ago Docs: man:rsyslogd(8) https://www.rsyslog.com/doc/ Main PID: 302 (rsyslogd) Tasks: 4 (limit: 1968) CGroup: /system.slice/rsyslog.service └─302 /usr/sbin/rsyslogd -n -iNONE Mai 16 00:00:03 debian64 rsyslogd[302]: [origin software="rsyslogd" swVersion="8.1901.0" x-pid="302" x-info="https://www.rsyslog.com";] rsyslogd was HUPed Mai 16 00:00:03 debian64 rsyslogd[302]: [origin software="rsyslogd" swVersion="8.1901.0" x-pid="302" x-info="https://www.rsyslog.com";] rsyslogd was HUPed Mai 17 00:00:03 debian64 rsyslogd[302]: [origin software="rsyslogd" swVersion="8.1901.0" x-pid="302" x-info="https://www.rsyslog.com";] rsyslogd was HUPed Mai 18 00:00:02 debian64 rsyslogd[302]: [origin software="rsyslogd" swVersion="8.1901.0" x-pid="302" x-info="https://www.rsyslog.com";] rsyslogd was HUPed Mai 19 00:00:02 debian64 rsyslogd[302]: [origin software="rsyslogd" swVersion="8.1901.0" x-pid="302" x-info="https://www.rsyslog.com";] rsyslogd was HUPed Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable. --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- journalctl -u logrotate -- Logs begin at Sat 2021-05-15 07:00:01 CEST, end at Wed 2021-05-19 06:58:28 CEST. -- Mai 16 00:00:01 debian64 systemd[1]: Starting Rotate log files... Mai 16 00:00:03 debian64 systemd[1]: logrotate.service: Succeeded. Mai 16 00:00:03 debian64 systemd[1]: Started Rotate log files. Mai 17 00:00:01 debian64 systemd[1]: Starting Rotate log files... Mai 17 00:00:03 debian64 systemd[1]: logrotate.service: Succeeded. Mai 17 00:00:03 debian64 systemd[1]: Started Rotate log files. Mai 18 00:00:01 debian64 systemd[1]: Starting Rotate log files... Mai 18 00:00:02 debian64 systemd[1]: logrotate.service: Succeeded. Mai 18 00:00:02 debian64 systemd[1]: Started Rotate log files. Mai 19 00:00:01 debian64 systemd[1]: Starting Rotate log files... Mai 19 00:00:02 debian64 systemd[1]: logrotate.service: Succeeded. Mai 19 00:00:02 debian64 systemd[1]: Started Rotate log files. I will continue to watch the whole thing. Maybe I should restart the computer.
