Hi, John Hala <john.hala@villanova.edu> [20070906 08:48:18 -0400]:
I apologize, I should have been clearer. I just want to delete the old logs, and want to know how others are doing it.
Should I simply create a shell script for the local logs and schedule it in cron? Something similar to find /logs -type f -mtime +30 -exec rm {} \;
I would put *single* quotes (') around the "{}" so that any spaces in the filename are handled correctly too.
However, I'm not sure how to remove old mysql data. I've read issues about locking the database and then removing the data.
you can do something like put in a text file: ====== USE cheese-database; LOCK TABLES chedder READ; DELETE........; UNLOCK TABLES; ====== Then 'echo -e "[client]\npassword=<password>\n" > ~/.my.cnf' and then you run (in a cron job): $ cat cmds.sql | mysql -u <user> Make sure you index your timestamp field then the DELETE operation should be *very* fast. Cheers Alex
-----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Geller, Sandor (IT) Sent: Thursday, September 06, 2007 6:10 AM To: Syslog-ng users' and developers' mailing list Subject: Re: [syslog-ng] Log Rotation
Hello,
I am logging locally to
destination hosts { file("/opt/log/HOSTS/$YEAR/$MONTH/$DAY/$HOST/$PROGRAM" owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(yes));};
Why do you want to rotate these??? New files will be created every day. Simply delete the old ones if you need to reclaim space.
I am also logging to a mysql database
destination d_mysql { pipe("/tmp/mysql.pipe" template("INSERT INTO logs (host, facility, priority, level, tag, date, time, program, msg) VALUES ('$HOST', '$FACILITY', '$PRIORITY', '$LEVEL', '$TAG', '$YEAR-$MONTH-$DAY', '$HOUR:$MIN:$SEC', '$PROGRAM', '$MSG');\n") template-escape(yes)); };
Sorry, I still don't understand what do you want to achieve.
Log rotation or log retention ?
regards,
Sandor --------------------------------------------------------
NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error. _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html