[syslog-ng]Problem with options
TIM MOORE
syslog-ng@lists.balabit.hu
Thu, 03 Apr 2003 14:34:03 -0500
This is a MIME message. If you are reading this text, you may want to
consider changing to a mail reader or gateway that understands how to
properly handle MIME multipart messages.
--=_F4AB4BA2.8CEDB212
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable
I have tried two options in the config file that don't seem to work =
properly. I have many devices logging to this box creating a file for =
each day. When one month is up, I hope that they will begin to write over =
the previous months file. Here is how I was attempting to do this:
First I have tried to set the log_fifo_size to 12288 lines. According to =
the extended sample syslog-ng conf file this setting will set the number =
of lines for the output file. However, I have many files that are way =
over this line amount. Does this option work?
However, an even better solution seemed to set the remove_if_older option =
to say 172800 (2 days). This way when it comes back around to the first =
day of the month (01) then it would see that this file is older than 2 =
days and wack it and start with a new "01" file. =20
Any ideas how to get this to work with syslog-ng. I have a fix for it, =
but would rather not leave it to external scripts to fix the problem. Any =
suggestions?
Tim
--=_F4AB4BA2.8CEDB212
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Description: HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-1"=
>
<META content=3D"MSHTML 6.00.2800.1141" name=3DGENERATOR></HEAD>
<BODY style=3D"MARGIN-TOP: 2px; FONT: 10pt Tahoma; MARGIN-LEFT: 2px">
<DIV>I have tried two options in the config file that don't seem to =
work=20
properly. I have many devices logging to this box creating a file =
for each=20
day. When one month is up, I hope that they will begin to write over =
the=20
previous months file. Here is how I was attempting to do this:</DIV>
<DIV> </DIV>
<DIV>First I have tried to set the log_fifo_size to=20
12288 lines. According to the extended sample syslog-ng =
conf=20
file this setting will set the number of lines for the output =
file. =20
However, I have many files that are way over this line amount. =
Does=20
this option work?</DIV>
<DIV> </DIV>
<DIV>However, an even better solution seemed to set the remove_if_older =
option=20
to say 172800 (2 days). This way when it comes back around to the =
first=20
day of the month (01) then it would see that this file is older than 2 =
days and=20
wack it and start with a new "01" file. </DIV>
<DIV> </DIV>
<DIV>Any ideas how to get this to work with syslog-ng. I have a fix =
for=20
it, but would rather not leave it to external scripts to fix the problem.&n=
bsp;=20
Any suggestions?</DIV>
<DIV> </DIV>
<DIV>Tim</DIV></BODY></HTML>
--=_F4AB4BA2.8CEDB212--