Logfile rotation

Ciag

Hi,

 

Our Kiwi syslog server is dedicated for our firewalls, which you might imagine generates large logfiles. I currently have logfile rotation enabled with the following settings:

Total number of log files = 31

Maximum log file age = 1 day

My understanding of this is that with the above settings the logfile folder should contain at it's max 31 logfiles each one representing the last 31 days of received syslog.

But this is not the case, what is happening is that the logfile folder keeps filling up until the drive it sits on is completely full. Last time it happened there were 50 logfiles in the folder.

I'm now having to manually delete logfiles every month. Is there another way to configure these setting to get it to do what I want?

Regards

Ciaran

Kuz

Hi Ciaran,

Are you using Auto-split variables in the Log-to-file filename?  This may impact the Log File Rotation scheme, in that it expects static filenames, not dynamic as would be generated by the inclusion of any auto-split variables in the log file name/path.

Regardless, you should be able to employ a Scheduled Archive Task to achieve what you want.

More info here: http://www.kiwisyslog.com/help/syslog/index.html?archivetask.htm