[syslog-ng] Log Rotation

[Alexander Clouter]

Hi,

John Hala <john.hala at villanova.edu> [20070906 08:48:18 -0400]:
>
> I apologize, I should have been clearer.
> I just want to delete the old logs, and want to know how others are doing it.
> 
> Should I simply create a shell script for the local logs and schedule it in cron?  Something similar to
> find /logs -type f -mtime +30 -exec rm {} \;
> 
I would put *single* quotes (') around the "{}" so that any spaces in the 
filename are handled correctly too.

> However, I'm not sure how to remove old mysql data.  I've read issues about 
> locking the database and then removing the data.
> 
you can do something like put in a text file:

======
USE cheese-database;
LOCK TABLES chedder READ;
DELETE........;
UNLOCK TABLES;
======

Then 'echo -e "[client]\npassword=<password>\n" > ~/.my.cnf' and then you 
run (in a cron job):

$ cat cmds.sql | mysql -u <user>

Make sure you index your timestamp field then the DELETE operation should be 
*very* fast.

Cheers

Alex

> -----Original Message-----
> From: syslog-ng-bounces at lists.balabit.hu [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Geller, Sandor (IT)
> Sent: Thursday, September 06, 2007 6:10 AM
> To: Syslog-ng users' and developers' mailing list
> Subject: Re: [syslog-ng] Log Rotation
> 
> Hello,
> 
> > I am logging locally to
> >
> > destination hosts {
> > file("/opt/log/HOSTS/$YEAR/$MONTH/$DAY/$HOST/$PROGRAM"
> > owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(yes));};
> 
> Why do you want to rotate these??? New files will be created every
> day. Simply delete the old ones if you need to reclaim space.
> 
> > I am also logging to a mysql database
> >
> > destination d_mysql { pipe("/tmp/mysql.pipe" template("INSERT
> > INTO logs (host, facility, priority, level, tag, date, time,
> > program, msg) VALUES ('$HOST', '$FACILITY', '$PRIORITY',
> > '$LEVEL', '$TAG', '$YEAR-$MONTH-$DAY', '$HOUR:$MIN:$SEC',
> > '$PROGRAM', '$MSG');\n") template-escape(yes)); };
> 
> Sorry, I still don't understand what do you want to achieve.
> 
> Log rotation or log retention ?
> 
> regards,
> 
> Sandor
> --------------------------------------------------------
> 
> NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> 
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> 
>