[syslog-ng] Log rotate without log rotate.

[Bruno Vieira]

Hi there. Thank you for your opinion.

I have found that this really is a feature well needed by many
embeddedsystems.

I will implement or reuse a component that makes this kind of rotation...
the conclusion i got was that what I really needed was a file that would
implement a buffer... so, the only way is making a daemon that does this for
me.. and it may or may not save it's buffer on a destination file.

It would be great if Linux had a driver that would do this on it's own. Or
at least a driver on the project openwrt (linux for embedded systems).

Well, I have the solution now :)

Thanks you all for your contribution.
Many regards,
Bruno.





On 17 Mar 2007 16:25:32 +0000, Bryan Henderson <bryanh at giraffe-data.com>
wrote:
>
> >I have a solution.. but I think there can be a better one. My solution
> is:
> >having a midlle program between syslog-ng and the destination file. And
> for
> >every message received, the program would verify if the destination file
> >(p.e. auth.log) already has 100 lines. If so, deleted the last line, make
> >all others one ENTER down and that append the new line to the beginning
> of
> >the file.
>
> It would probably be better to maintain the file in circular fashion:
> allocate 8K in the beginning, then write messages from beginning to
> end, then wrap around and write from the beginning again, always
> keeping track (in a header of the file) of where you last wrote.  Use
> a special program that understands this file format to translate it to
> a regular stream that you can use normally.
>
> Lots of systems have programs that do this.  I looked on Freshmeat for
> a publicly available one and found 'cupyvei', though I don't much care
> for the details of this implementation.  It would be easy to write a
> program of your own.
>
> I also think a built in log destination of this type
> (e.g. "file_circular") would be an excellent addition to syslog-ng.  I
> think this type of logging is a common requirement.
>
> --
> Bryan Henderson                                   San Jose, California
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20070317/540909b3/attachment.html