[syslog-ng] (U) [Non-DoD Source] Re: Rotate syslog-ng log files

[Amin, Jitesh CTR DISA JSP (US)]

CLASSIFICATION: UNCLASSIFIED
Hello,
So we have to plan an upgrade first.

Let me ask this, with the following config =  destination syslog { file("/var/log/syslog-${YEAR}-${MONTH}-${DAY}.log"); };

It created new file and started writing to it (versus creating new syslog.log). Question, if we plan to accept this for now, with above config, would it create a new file ever day with following file names or no it would not work with v1.6.8

syslog-{YEAR}-{MONTH}-{DAY}.log
syslog-{YEAR}-{MONTH}-{DAY}.log.0
syslog-{YEAR}-{MONTH}-{DAY}.log.1


Thanks
Jitesh Amin


CLASSIFICATION: UNCLASSIFIED

-----Original Message-----
From: Gergely Nagy <algernon at balabit.com> 
Sent: Wednesday, May 30, 2018 9:07 AM
To: Amin, Jitesh CTR DISA JSP (US) <jitesh.amin.ctr at mail.mil>; Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu>
Subject: RE: (U) [syslog-ng] [Non-DoD Source] Re: Rotate syslog-ng log files

>>>>> "Amin" == Amin, Jitesh CTR DISA JSP (US) <jitesh.amin.ctr at mail.mil> writes:

    Amin> Verion 1.6.8

That... is an old version, about 13 years old, and it does not support the templating later versions do. I would strongly recommend upgrading to something more recent (we are at 3.15.1 at the moment).

If you can't, you can still use logrotate to rotate the logs, though if you are using such and old syslog-ng, the version of your logrotate might be similarly ancient.

-- 
|8]

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6560 bytes
Desc: not available
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20180530/b5b82f6a/attachment-0001.bin>