topic Re: syslog in Operating System - HP-UX

syslog

Daniel Fourie — Tue, 08 Apr 2003 09:53:39 GMT

How can I limit the size of syslog.log in /var/adm/syslog/

Please Help

Re: syslog

steven Burgess_2 — Tue, 08 Apr 2003 10:08:24 GMT

Hi

Purge and compress it on a daily basis

/sbin/init.d/syslogd stop

mv /var/adm/syslog/syslog.log /var/adm/syslog/syslog.`date`

gzip /var/adm/syslog/syslog.`date`

find /var/adm/syslog ! -newer /var/adm/syslog/syslog.`date` -exec rm {}\;

Then restart which will create a new file

/sbin/init.d/syslogd start

HTH

Steve

Re: syslog

Rita C Workman — Tue, 08 Apr 2003 10:47:19 GMT

I periodically clean up syslog using the SAM utility for this.

But till I get around to doing this...I recommend just writing a quick script to clean out any verbose and just informational type statements. And/or maybe a script that looks for important/critical things and sends you a page (or email) for the message...then puts the message in a special file and removes it from syslog. So far these have worked for me to keep syslog from growing too fast.

Just a thought,
Rita

Re: syslog

Ravi_8 — Tue, 08 Apr 2003 10:58:47 GMT

Hi,

I prefer putting Steven's script in crontab file, saving only last weeks syslog files

Re: syslog

Jon Finley — Wed, 09 Apr 2003 01:35:59 GMT

I like the script.

But, after running gzip won't it have a 'gz' extension?

i.e.

syslog.`date`.gz ??

Jon

Re: syslog

Steven E. Protter — Wed, 09 Apr 2003 01:50:43 GMT

Once a week the following things happen on my system.

cp /var/adm/syslog/syslog.log /tmp/syslog.log.$DATEVAR

> /var/adm/syslog/syslog.log

Zeros the little guy out.

Keeps a copy. DATEVAR has yyyymmdd in it.

SEP

Re: syslog

Rory R Hammond — Wed, 09 Apr 2003 20:04:34 GMT

I keep several week of syslog.
Like Steve P using a cron job

I copy the sys log file

and then Compress the Copy
to save space

echo "" > /var/adm/syslog/syslog.log

zero out the file keep you from haveing to stop and start
cron.

If you don't care about lots of history.
I would use via cron.
/sbin/init.d/syslog stop;
/sbin/init.d/syslog start;
This process would give you a OLDsyslog.log as if you rebooted.

Rory