On Mon 31 Mar 2008, Michael Biebl wrote: > > BTW, why are the mail files handled separately? Also, rsyslog could be > > reloaded twice every night, perhaps that could be optimized as well. > > I grouped all log files that are rotated daily, and split all weekly > rotated files into mail and others (for better readability).
Hmm, OK, I missed the fact the first part was for daily :-) > rsyslog should not be reloaded twice every night (at least it should > only happen once a week) as the first reload happens daily, the second > only weekly. You should add the "sharedscripts" option, default is "nosharedscripts" which means that the postrotate is run for every logfile rotated... Note also that the postrotate is only run if there is in fact a logfile rotated. In the (very theoretical :-) case that the logfiles listed in the last stanza are still empty, then rsyslog will continue writing to the mail logfiles that had actually been rotated. As "delaycompress" is not listed, this could mean loss of any new logged data. Hence I'd recommend combining the last two stanzas, and also adding "delaycompress". In any case, using logrotate is cleaner than the old sysklogd way IMHO :-), although it was nice that sysklogd handled logfile names dynamically. thanks, Paul Slootman -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
