Re: rsyslog adding old entries again

2019-12-17 Thread lists
Hi all, I have now tried to use packetfence on CentOS, as they claim CentOS is their best supported platform. Now rsyslog logging works as expected: - shutdown rsyslog - delete files from the log directory - start rsyslog and only new/recent logs start appearing. I have no idea why debian beh

Re: rsyslog adding old entries again

2019-12-14 Thread Andrei POPESCU
On Sb, 14 dec 19, 10:28:29, Andrei POPESCU wrote: > On Vi, 13 dec 19, 20:47:49, mj wrote: > > Hi Andrei, > > > > So: > > > > > root@pf:~# ps aux | grep rsyslog > > > root 11250 0.8 3.3 872116 274200 ? Ssl 15:37 2:26 > > > /usr/sbin/rsyslogd -n > > > root 23873 0.0 0.0 12780

Re: rsyslog adding old entries again

2019-12-14 Thread Andrei POPESCU
On Vi, 13 dec 19, 20:47:49, mj wrote: > Hi Andrei, > > So: > > > root@pf:~# ps aux | grep rsyslog > > root 11250 0.8 3.3 872116 274200 ? Ssl 15:37 2:26 > > /usr/sbin/rsyslogd -n > > root 23873 0.0 0.0 12780 968 pts/0S+ 20:25 0:00 grep > > rsyslog > > root@pf:~# s

Re: rsyslog adding old entries again

2019-12-13 Thread tomas
On Fri, Dec 13, 2019 at 03:07:56PM -0500, Greg Wooledge wrote: > On Fri, Dec 13, 2019 at 08:47:49PM +0100, mj wrote: > > > root@pf:~# ps aux | grep rsyslog > > > root 11250 0.8 3.3 872116 274200 ? Ssl 15:37 2:26 > > > /usr/sbin/rsyslogd -n > > > root 23873 0.0 0.0 12780 968

Re: rsyslog adding old entries again

2019-12-13 Thread Greg Wooledge
On Fri, Dec 13, 2019 at 08:47:49PM +0100, mj wrote: > > root@pf:~# ps aux | grep rsyslog > > root 11250 0.8 3.3 872116 274200 ? Ssl 15:37 2:26 > > /usr/sbin/rsyslogd -n > > root 23873 0.0 0.0 12780 968 pts/0S+ 20:25 0:00 grep > > rsyslog > > root@pf:~# service rsys

Re: rsyslog adding old entries again

2019-12-13 Thread mj
Hi Andrei, So: root@pf:~# ps aux | grep rsyslog root 11250 0.8 3.3 872116 274200 ? Ssl 15:37 2:26 /usr/sbin/rsyslogd -n root 23873 0.0 0.0 12780 968 pts/0S+ 20:25 0:00 grep rsyslog root@pf:~# service rsyslog stop root@pf:~# ps aux | grep rsyslog root 23909

Re: rsyslog adding old entries again

2019-12-13 Thread Andrei POPESCU
On Vi, 13 dec 19, 15:51:32, mj wrote: > > And what I do: > - service rsyslog stop > - rm -f /usr/local/pf/logs/* > - ls /usr/local/pf/logs/ to confirm that it *is* empty > - service rsyslog start > > and then all logfiles have reappeared (are regenerated?) in > /usr/local/pf/conf with timestamp N

Re: rsyslog adding old entries again

2019-12-13 Thread mj
Hi Tomás, Thanks for your reply! More details, ok :-) The relevant rsyslog configuration belongs to packetfence.org, and is: $ModLoad imuxsock # provides support for local system logging (e.g. via logger command) $ModLoad imjournal # provides access to the systemd journal # Disable rate-limit

Re: rsyslog adding old entries again

2019-12-13 Thread tomas
On Fri, Dec 13, 2019 at 01:21:38PM +0100, mj wrote: > Hi, > > I'm sure this is a faq, but I cannot find the answer. :-( > > On debian 9, rsyslog with some rules to log to certain specific files. > > Now: when I: > - stop rsyslog > - delete those specific log files Which files do you delete? How