在linux系统中,有一个日志总管,配置文件在logrotate.conf和logrotate.d
内容如下
[root@bogon etc]# cat logrotate.conf
# see "man logrotate" for details
# rotate log files weekly
weekly //默认一周分割一次
内容如下
[root@bogon etc]# cat logrotate.conf
# see "man logrotate" for details
# rotate log files weekly
weekly //默认一周分割一次
# keep 4 weeks worth of backlogs
rotate 4 //默认4个备份
rotate 4 //默认4个备份
# create new (empty) log files after rotating old ones
create //创建
create //创建
# use date as a suffix of the rotated file
dateext //使用日期做日志文件后缀
dateext //使用日期做日志文件后缀
# uncomment this if you want your log files compressed
#compress
#compress
# RPM packages drop log rotation information into this directory
include /etc/logrotate.d //包含文件logrotate.d中的配置文件
include /etc/logrotate.d //包含文件logrotate.d中的配置文件
# no packages own wtmp and btmp -- we'll rotate them here
/var/log/wtmp { //设定文件
monthly //一个月分割一次
create 0664 root utmp
minsize 1M //大小超过1M时,就分割
rotate 1 //做一个备份
}
/var/log/wtmp { //设定文件
monthly //一个月分割一次
create 0664 root utmp
minsize 1M //大小超过1M时,就分割
rotate 1 //做一个备份
}
/var/log/btmp { //设定文件
missingok //忽略错误
monthly //一个月分割一次
create 0600 root utmp
rotate 1 //做一个备份
}
missingok //忽略错误
monthly //一个月分割一次
create 0600 root utmp
rotate 1 //做一个备份
}
# system-specific logs may be also be configured here.
[root@bogon etc]#
[root@bogon etc]#
在logrotate.d中可设定配置文件
比如设定rsyslog的配置文件,起名为syslog
内容如下
[root@bogon logrotate.d]# cat syslog
/var/log/cron
/var/log/maillog
/var/log/messages
/var/log/secure
/var/log/spooler
{
sharedscripts
postrotate
/bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true //重启rsyslog服务
endscript
}
[root@bogon logrotate.d]#
比如设定rsyslog的配置文件,起名为syslog
内容如下
[root@bogon logrotate.d]# cat syslog
/var/log/cron
/var/log/maillog
/var/log/messages
/var/log/secure
/var/log/spooler
{
sharedscripts
postrotate
/bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true //重启rsyslog服务
endscript
}
[root@bogon logrotate.d]#