Paul Slootman wrote: > >> rsyslog should not be reloaded twice every night (at least it should >> only happen once a week) as the first reload happens daily, the second >> only weekly. > > You should add the "sharedscripts" option, default is "nosharedscripts" > which means that the postrotate is run for every logfile rotated... > > Note also that the postrotate is only run if there is in fact a logfile > rotated. In the (very theoretical :-) case that the logfiles listed in > the last stanza are still empty, then rsyslog will continue writing to > the mail logfiles that had actually been rotated. As "delaycompress" is > not listed, this could mean loss of any new logged data. > Hence I'd recommend combining the last two stanzas, and also adding > "delaycompress".
Ok, will look into this. > In any case, using logrotate is cleaner than the old sysklogd way IMHO > :-), although it was nice that sysklogd handled logfile names > dynamically. If you need dynamic log files names, you could take a look at the DynFile functionality. For the "standard" Debian log files, I guess it's reasonable to use static names. Cheers, Michael [1] http://www.rsyslog.com/doc-rsyslog_conf.html -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature
