[syslog-ng] Circular File Output

[Valdis.Kletnieks at vt.edu]

On Thu, 29 Jun 2006 16:46:01 EDT, Kenneth Kassing said:

> I am using syslog-ng on an embedded Linux device with a limited amount 
> of resources.  To this end, I must maintain very small log files.  I 
> have looked into log rotation, but do not wish to take the crond / 
> logrotate approach.

Logrotate is a 43K binary on my Fedora Core box.  I'm not sure you're
going to have an easy time keeping the bloat in adding it natively to
syslog-ng to be much smaller (since you'll have to add in all the support
for config files that logrotate has into syslog-ng's parser, etc).

Or even cheaper - have syslog-ng log to /var/log/$MON/$DAY or similar
(doesn't matter what, as long as it's different per-day), and then just
have cron run a 'find /var/log -type f -mtime +7 -exec rm {};').  Hard to
get much more lightweight than that if you have 'find' onboard already
(though it's 156K, so logrotate is a better idea if you have to add a binary).

I'm thinking it's also a non-starter on the maintenance end, as it will
be a big patch you'll be dragging from version to version, if Balazs isn't
interested in putting it in the base release....
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20060629/90e55477/attachment.pgp