Re: [cobalt-users] Log Files and Rotation

[Jay Summers <jay@xxxxxxxxxxxxxxxxxxxx>]

> We have a site which has a high throughput. The log files average 20Gb per
> day. With the current RAQ4 settings every day or two days the old log file
> is compressed and the old file deleted. Also the compressed file is deleted
> every time it is updated and seems to be limited at about 1.5Mb. We want to
> be able to have larger log files, zipped with the old zips retained. We
> understand alterations can be made to logrotate.conf and wonder if anyone
> has done this and can advise what setting we should use.

I think alterations can be globally set in the logrotate.conf file but
Cobalt has individual site config files that override the logrotate.conf.
They are in the /etc/logrotate.d and /etc/logrotate.onboot directories. If
you look inside there you'll see them labeled by site number, e.g. site1,
site2, site3, etc. This is where you'll want to change the site configs.
Remember though that changes made by hand get overridden if you make changes
to the site through the GUI.

> Does "copytruncate" auto create copies of old files?
> Should "olddir" be used to hold old logs (standard and compressed)?
> I assume "size" limits log file size (standard and compressed)?
> Is there a recommended limit on log file size?

man logrotate will be very helpful
 
> Will these work with webalizer?

I don't use webalizer so I don't know, sorry. You might want to take a
stroll through the archives. I know i've seen other posts on this subject
before and they should be very helpful.

HTH,
Jay