On Monday 13 September 2004 10:50, Andreas Janssen wrote:
> Hello
>
> Adam Funk (<[EMAIL PROTECTED]>) wrote:
>
>> What causes /var/log/auth.log to be rotated?
>>
>> `grep -R auth.log /etc/` lists only the /etc/syslog.conf file entry
>> to
>> produce the auth.log file. It *is* being rotated weekly on my
>> system, but I want to add to the rotation procedure a script to mail
>> me a log analysis.
>
> logrotate is called by the cron daemon. Take a look
> at /etc/cron.daily/logrotate.
Sorry, I didn't make it clear that I already know about logrotate. But
I can't find any references to auth.log in /etc/logrotate.conf
or /etc/logrotate.d/*; the wildcards in the config files do not catch
auth.log; and the status file doesn't list it.
So something else must be rotating it?!
/etc $ grep -R 'auth' /etc/logrotate.*
/etc $ grep -R '\*' /etc/logrotate.*
/etc/logrotate.d/apache-perl:/var/log/apache-perl/*.log {
/etc/logrotate.d/apache:/var/log/apache/*.log {
/etc/logrotate.d/cupsys:/var/log/cups/*log {
/etc $ cat /var/lib/logrotate/status
logrotate state -- version 2
"/var/log/apache/access.log" 2004-9-12
"/var/log/apache/error.log" 2004-9-12
"/var/log/aptitude" 2004-1-24
"/var/log/base-config.log" 2004-1-25
"/var/log/base-config.timings" 2004-1-25
"/var/log/cups/access_log" 2004-9-13
"/var/log/cups/error_log" 2004-9-13
"/var/log/cups/page_log" 2004-9-11
"/var/log/exim4/mainlog" 2004-9-13
"/var/log/exim4/rejectlog" 2004-5-13
"/var/log/exim4/paniclog" 2004-6-10
"/var/log/ppp-connect-errors" 2004-1-24
"/var/log/samba/log.smbd" 2004-9-12
"/var/log/samba/log.nmbd" 2004-9-1
"/var/log/scrollkeeper.log" 2004-9-12
"/var/log/xdm.log" 2004-1-24
"/var/log/xtel.log" 2004-1-24
"/var/log/wtmp" 2004-9-12
"/var/log/btmp" 2004-9-1
"/var/spool/exim/log/mainlog" 2004-4-26
"/var/spool/exim/log/paniclog" 2004-1-26
"/var/spool/exim/log/rejectlog" 2004-2-25
"/var/log/xttpd" 2004-2-14
"/var/log/apache-perl/access.log" 2004-9-3
"/var/log/apache-perl/error.log" 2004-9-5
/etc $ ls -l /var/log/auth.log*
-rw-r----- 1 root adm 81517 2004-09-13 11:50 /var/log/auth.log
-rw-r----- 1 root adm 505489 2004-09-12 06:47 /var/log/auth.log.0
-rw-r----- 1 root adm 48970 2004-09-05 06:47 /var/log/auth.log.1.gz
-rw-r----- 1 root adm 22560 2004-08-22 06:47 /var/log/auth.log.2.gz
-rw-r----- 1 root adm 32341 2004-08-08 06:47 /var/log/auth.log.3.gz
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
