Brian, <br>
<br>
What I do is have the logs date time stamped so it starts a new log
each day. Then I run a script from CRON to have those files
gzipped that are more than two days old and delete anything more than
thirty days old. <br>
<br>
HTH, <br>
<br>
Mark<br>
<br>
<br>
Here is what I have: <br>
<br>
--from syslog-ng.conf--<br>
<br>
destination hosts {<br>
file("/var/log/network/$HOST/$HOST$YEAR$MONTH$DAY"<br>
owner(root) group(root) perm(0775) dir_perm(0775) create_dirs(yes));<br>
};<br>
<br>
log {<br>
source(s_all);<br>
destination(hosts);<br>
};<br>
<br>
--the "archive script" (it's not really archiving but it does what I need it to do)--<br>
<br>
#!/bin/bash<br>
<br>
cd /var/log/network/corppix<br>
<br>
# Compress all of the Corp Pix logs older than two days<br>
<br>
/usr/bin/find . -name corppix\* -mtime +2 -exec gzip {} \;<br>
<br>
#Delete all logs older than 30 days.<br>
<br>
/usr/bin/find . -name corppix\* -mtime +30 -exec rm {} \;<br>
<br>
#Same thing for CorpPixFailover<br>
<br>
cd /var/log/network/corppixfailover<br>
<br>
# Compress all of the Corp Pix logs older than two days<br>
<br>
/usr/bin/find . -name corppixfailover\* -mtime +2 -exec gzip {} \;<br>
<br>
#Delete all logs older than 30 days.<br>
<br>
/usr/bin/find . -name corppixfailover\* -mtime +30 -exec rm {} \;<br>
<br><br><div><span class="gmail_quote">On 8/24/06, <b class="gmail_sendername">Brian Loe</b> <<a href="mailto:knobdy@gmail.com">knobdy@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
I've been trying to get logrotate to work on AIX and it simply doesn't<br>"do" anything (run it with debug and it tells me its reading the<br>config file then exits, files remain the same - regardless of size or
<br>age).<br><br>So, what else should I try? Eventually it looks like I'm going to be<br>feeding pipes and files for use with SEC - but I need to archive each<br>log for 30 days, then archive all of those files for a year, etc..
<br>_______________________________________________<br>syslog-ng maillist - <a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a><br><a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng
</a><br>Frequently asked questions at <a href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a><br><br></blockquote></div><br><br clear="all"><br>-- <br>"Knowledge is power and I like power." Cobra Bubbles, Lilo & Stitch