I have a box running Red Hat 6.2. I have a problem with the log
rotation on this box. Well, I think the problem is with the log
rotation. Here is what I know:
1) the date and time on the computer are correct
2) logs are logging to the fourth week of logs, rather than the first
week of logs. The easiest way to explain what I am talking about is to
show you a snapshot of my /var/log directory:
[bryanw@linux1 log]$ ls -la
total 3240
drwxr-xr-x 7 root root 4096 Apr 3 08:43 .
drwxr-xr-x 18 root root 4096 Apr 30 2001 ..
-rw-r--r-- 1 root root 0 Mar 31 05:23 boot.log
-rw-r--r-- 1 root root 0 Mar 24 05:15 boot.log.1
-rw-r--r-- 1 root root 0 Mar 17 06:48 boot.log.2
-rw-r--r-- 1 root root 0 Mar 10 06:17 boot.log.3
-rw-r--r-- 1 root root 8607 Apr 2 14:10 boot.log.4
As you can see, everything is logging to boot.log.4 (in this example).
Furthermore, boot.log.4 goes back to March 8. So, it looks like things
have been messed up for almost a month. Also, this example also applies
to /var/log/maillog, /var/log/messages, /var/log/secure,
/var/log/spooler, and /var/log/xferlog. I have also included my
/etc/syslog.conf and /etc/logrotate.conf files. Any help would be most
appreciated.
Thanks,
Bryan
/ETC/SYSLOG.CONF
---------<snip>-----------------
# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.* /dev/console
# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;news.none;authpriv.none
/var/log/messages
# The authpriv file has restricted access.
authpriv.* /var/log/secure
# Log all the mail messages in one place.
mail.* /var/log/maillog
# Everybody gets emergency messages, plus log them on another
# machine.
*.emerg *
# Save mail and news errors of level err and higher in a
# special file.
#uucp,news.crit /var/log/spooler
# Save boot messages also to boot.log
local7.*
/var/log/boot.log
# Save ldap logs to separate file
local4.*
/var/log/slapd.log
#
# INN
#
#news.=crit
/var/log/news/news.crit
#news.=err
/var/log/news/news.err
#news.notice
/var/log/news/news.notice
----</snip>-------------------
/ETC/LOGROTATE.CONF
----<snip>--------------------
# see "man logrotate" for details
# rotate log files weekly
weekly
# keep 4 weeks worth of backlogs
rotate 4
# send errors to root
errors root
# create new (empty) log files after rotating old ones
create
# uncomment this if you want your log files compressed
#compress
# RPM packages drop log rotation information into this directory
include /etc/logrotate.d
# no packages own lastlog or wtmp -- we'll rotate them here
/var/log/wtmp {
monthly
create 0664 root utmp
rotate 1
}
# system-specific logs may be configured here
--------</snip>---------------------
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
