linux系统中日志文件管理（日志文件分包）

在linux系统中，有一个日志总管，配置文件在logrotate.conf和logrotate.d
内容如下
[root@bogon etc]# cat logrotate.conf
# see "man logrotate" for details
# rotate log files weekly
weekly          //默认一周分割一次

# keep 4 weeks worth of backlogs
rotate 4         //默认4个备份

# create new (empty) log files after rotating old ones
create          //创建

# use date as a suffix of the rotated file
dateext          //使用日期做日志文件后缀

# uncomment this if you want your log files compressed
#compress

# RPM packages drop log rotation information into this directory
include /etc/logrotate.d     //包含文件logrotate.d中的配置文件

# no packages own wtmp and btmp -- we'll rotate them here
/var/log/wtmp {        //设定文件
    monthly         //一个月分割一次
    create 0664 root utmp     
 minsize 1M        //大小超过1M时，就分割
    rotate 1        //做一个备份
}

/var/log/btmp {        //设定文件
    missingok        //忽略错误
    monthly         //一个月分割一次
    create 0600 root utmp
    rotate 1        //做一个备份
}

# system-specific logs may be also be configured here.
[root@bogon etc]#

在logrotate.d中可设定配置文件
比如设定rsyslog的配置文件，起名为syslog
内容如下
[root@bogon logrotate.d]# cat syslog
/var/log/cron
/var/log/maillog
/var/log/messages
/var/log/secure
/var/log/spooler
{
    sharedscripts
    postrotate
 /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true  //重启rsyslog服务
    endscript
}
[root@bogon logrotate.d]#