[syslog-ng] Log rotate without log rotate.

[Valdis.Kletnieks at vt.edu]

On Fri, 16 Mar 2007 14:59:00 -0000, Bruno Vieira said:

> I have a question and at the same time i almost know that it must exist a
> way of doing this.
> 
> The situation is: I want that my logs act as FIFOs. I mean.. I want my log
> files to have a max of 100 KB or 100 lines (the one that is most convenient
> to find a solution).

Trust me - you *really* want to break it on the basis of discrete times that
tend to have 100K per time period (be it once an hour, or once a day, or every
15 minutes, or something).  When you're trying to shoot a problem, and one
logfile destination runs from 02:17:34 to 03:09:19, the next from 03:09:19 to
05:48:28, and another destination runs from 01:45:07 to 02:36:12, the next from
02:36:12 to 06:29:58 - quick, which files do you need to get all messages from
45 seconds to either side of 03:10:15?

Oh, and one of the machines concerned didn't have the DST patch installed, so
you probably want to find 45 seconds either side of 02:10:15 as well. ;)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20070316/0f62b32b/attachment.pgp