topic Re: purging syslog.log in Operating System - HP-UX

purging syslog.log

khilari — Thu, 08 Jun 2006 09:32:00 GMT

Hi people, well my syslog.log has become really big, so how do i go about purging it. Should i just rm it and the next entry in it will re generate it???.

Thanks.

Re: purging syslog.log

Enrico P. — Thu, 08 Jun 2006 09:43:03 GMT

Hi,
if you want to rotate the syslog files, you can restart the syslogd daemon:

/sbin/init.d/syslogd stop
/sbin/init.d/syslogd start

OLDsyslog.log will be remove, syslog.log will move to OLDsyslog.log.

Enrico

Re: purging syslog.log

Robert-Jan Goossens — Thu, 08 Jun 2006 09:47:24 GMT

Khilari,

Copy it first to save location
# cp /var/adm/syslog/syslog.log /tmp/syslog.old
# cp /dev/null /var/adm/syslog/syslog.log

Robert-Jan

Re: purging syslog.log

Rick Garland — Thu, 08 Jun 2006 09:49:32 GMT

The syslog.log is just 1 of the log files to be aware of - there are others that grow without bounds unless they are managed in some way.

One tool available on the http://gate.cs.utah.edu site is "logrotate"

You can input the names of the logfiles, how oftern to rotate, how many copies to keep, if you want to roatate on file size, etc.

SAM is avail to purge log files as well but this reuires manual intervention.

Re: purging syslog.log

spex — Thu, 08 Jun 2006 10:08:06 GMT

Khilari,

To prevent this from happening in the future, you could cron something like the following to run just before midnight:

#!/usr/bin/sh
set -u
DATE=`date +%Y%m%d`
###############################
# syslog
###############################
cd /var/adm/syslog
rm syslog.yester.log
cp syslog.log syslog.$DATE.log
ln -s syslog.$DATE.log syslog.yester.log
cat /dev/null > syslog.log
find /var/adm/syslog -name 'syslog.*.log' -mtime +90 -exec rm -f {} \;

This way, you have one syslog file per day, and syslog.yester.log is a symlink to yesterday's log, which is useful in scripts and command aliases (I have an alias which does a more on syslog.yester.log and syslog.log). If you find you have too many files or too much space is being taken up, you may scale back on the 90-day retention, or compress logsfiles.

PCS

Re: purging syslog.log

MarkSyder — Thu, 08 Jun 2006 10:20:11 GMT

Checking the contents of the syslog should be part of your daily sys admin duties. Once you have checked it, go into SAM -> routine tasks -> system log files and trim the syslog to its recommended size. In reality, this will create a trimmed file of the recommended size and empty the syslog.

Mark Syder (like the drink but spelt different)