Re: [cobalt-users] lastlog file gets very big.

["Zeffie" <cobaltlist@xxxxxxxx>]

> 1. I thought that the command 'last' displays the contents of
>    /var/log/wtmp and that 'lastlog' displays the content of the
>    lastlog file.

thats correct...

> 3. /var/log/lastlog is now exactly the same size as it was when I
>    asked. I think something is broken -- but what?
>
> [22:23:08:war-admiral:~]ls -la /var/log/lastlog
> -rw-r--r--    1 root     root     19136220 Dec 17 21:16 /var/log/lastlog
> > I have seen ftp webcams cause this due to a high amount of logins by the
> > cam...
> > This can fill up your / too

This is so funny.... ok... on the RaQ4 in the logrotate.conf we find a
comment that says...
# no packages own lastlog or wtmp -- we'll rotate them here
and they aren't rotated!
BUT!  in the /etc/logrotate.onboot.conf we find our comment again but this
time the log gets rotated...
so the simple answer is "Reboot your server" :) LOL

if you really need logrotation just add this
/var/log/lastlog {
    monthly
    size 2M
    rotate 1
}
to the bottom of your /etc/logrotate.conf file and it will work
automaticly...

Zeffie
Cobalt RaQ System Administration, Maintenance and Repairs.
http://www.zeffie.com/how_to_contact_zeffie.html 734.454.9117
http://www.zeffie.com/ Home of the Worlds Largest Collection of RaQ rpms
Advanced Cobalt Security, Firewall, Snort, AntiSpam, AntiVirus and other
GUI's