You are not logged in.
- Topics: Active | Unanswered
#1 2014-03-15 10:04:52
- djipey
- Member
- Registered: 2011-07-30
- Posts: 159
[logrotate] it doesn't rotate the logs anymore
Hi,
I've been noticing a strange think for about 10 days. I didn't touch my configuration, but logrotate doesn't rotate the logs anymore, and when I specify a maximum size for the log files, it's not respected. Look:
total 1,6G
-rw-r----- 1 root log 0 8 mars 10:19 acpid.log
-rw-r----- 1 root log 0 1 mars 11:29 acpid.log-20140302
-rw-r----- 1 root log 0 2 mars 11:51 acpid.log-20140303
-rw-r----- 1 root log 0 3 mars 09:33 acpid.log-20140304
-rw-r----- 1 root log 0 4 mars 10:43 acpid.log-20140305
-rw-r----- 1 root log 0 5 mars 10:27 acpid.log-20140306
-rw-r----- 1 root log 0 6 mars 14:43 acpid.log-20140307
-rw-r----- 1 root log 0 7 mars 10:51 acpid.log-20140308
-rw-r----- 1 root log 587K 15 mars 11:01 auth.log
-rw-r----- 1 root log 79K 2 mars 11:01 auth.log-20140302
-rw-r----- 1 root log 73K 3 mars 09:01 auth.log-20140303
-rw-r----- 1 root log 84K 4 mars 10:42 auth.log-20140304
-rw-r----- 1 root log 102K 5 mars 10:01 auth.log-20140305
-rw-r----- 1 root log 80K 6 mars 14:01 auth.log-20140306
-rw-r----- 1 root log 11K 7 mars 10:01 auth.log-20140307
-rw-r----- 1 root log 74K 8 mars 10:06 auth.log-20140308
-rw------- 1 root utmp 0 1 mars 11:29 btmp
-rw------- 1 root utmp 768 4 févr. 17:58 btmp-20140301
drwxr-xr-x 2 clamav clamav 4,0K 8 mars 10:19 clamav
drwxr-xr-x 2 root root 4,0K 28 oct. 2012 ConsoleKit
-rw-r----- 1 root log 1,5M 15 mars 11:01 crond.log
-rw-r----- 1 root log 503K 2 mars 11:50 crond.log-20140302
-rw-r----- 1 root log 1,5M 3 mars 09:33 crond.log-20140303
-rw-r----- 1 root log 216K 4 mars 10:42 crond.log-20140304
-rw-r----- 1 root log 420K 5 mars 10:24 crond.log-20140305
-rw-r----- 1 root log 191K 6 mars 14:39 crond.log-20140306
-rw-r----- 1 root log 6,0K 7 mars 10:48 crond.log-20140307
-rw-r----- 1 root log 197K 8 mars 10:17 crond.log-20140308
drwxr-xr-x 2 root root 4,0K 8 mars 10:19 cups
-rw-r----- 1 root log 943K 15 mars 10:29 daemon.log
-rw-r----- 1 root log 64K 2 mars 10:50 daemon.log-20140302
-rw-r----- 1 root log 93K 3 mars 09:14 daemon.log-20140303
-rw-r----- 1 root log 145K 4 mars 10:13 daemon.log-20140304
-rw-r----- 1 root log 173K 5 mars 10:04 daemon.log-20140305
-rw-r----- 1 root log 181K 6 mars 14:40 daemon.log-20140306
-rw-r----- 1 root log 101K 7 mars 10:32 daemon.log-20140307
-rw-r----- 1 root log 112K 8 mars 10:13 daemon.log-20140308
-rw-r--r-- 1 root root 56K 7 oct. 2012 dmesg.log
-rw-r----- 1 root log 23K 15 mars 01:45 errors.log
-rw-r----- 1 root log 2,5K 2 mars 10:50 errors.log-20140302
-rw-r----- 1 root log 6,4K 3 mars 08:29 errors.log-20140303
-rw-r----- 1 root log 5,6K 4 mars 09:34 errors.log-20140304
-rw-r----- 1 root log 7,8K 5 mars 09:04 errors.log-20140305
-rw-r----- 1 root log 5,9K 6 mars 13:32 errors.log-20140306
-rw-r----- 1 root log 1,9K 7 mars 09:01 errors.log-20140307
-rw-r----- 1 root log 2,4K 8 mars 09:59 errors.log-20140308
-rw-r----- 1 root log 48M 15 mars 11:02 everything.log
-rw-r----- 1 root log 76M 9 mars 11:09 everything.log-20140309
-rw-r----- 1 root log 54M 10 mars 09:45 everything.log-20140310
-rw-r----- 1 root log 69M 11 mars 09:33 everything.log-20140311
-rw-r----- 1 root log 66M 12 mars 09:23 everything.log-20140312
-rw-r----- 1 root log 64M 13 mars 10:12 everything.log-20140313
-rw-r----- 1 root log 77M 14 mars 10:39 everything.log-20140314
-rw-r----- 1 root log 85M 15 mars 01:43 everything.log-20140315
-rw------- 1 root root 32K 14 mars 16:11 faillog
drwxr-sr-x+ 3 root systemd-journal 4,0K 14 mars 2013 journal
-rw-r----- 1 root log 48M 15 mars 11:02 kernel.log
-rw-r----- 1 root log 75M 9 mars 11:08 kernel.log-20140309
-rw-r----- 1 root log 54M 10 mars 09:45 kernel.log-20140310
-rw-r----- 1 root log 68M 11 mars 09:33 kernel.log-20140311
-rw-r----- 1 root log 65M 12 mars 09:23 kernel.log-20140312
-rw-r----- 1 root log 64M 13 mars 10:12 kernel.log-20140313
-rw-r----- 1 root log 77M 14 mars 10:39 kernel.log-20140314
-rw-r----- 1 root log 85M 15 mars 01:43 kernel.log-20140315
-rw-r--r-- 1 root root 286K 13 mars 19:23 lastlog
-rw-r----- 1 root log 0 8 mars 10:19 lpr.log
-rw-r----- 1 root log 0 1 mars 11:29 lpr.log-20140302
-rw-r----- 1 root log 0 2 mars 11:51 lpr.log-20140303
-rw-r----- 1 root log 0 3 mars 09:33 lpr.log-20140304
-rw-r----- 1 root log 0 4 mars 10:43 lpr.log-20140305
-rw-r----- 1 root log 0 5 mars 10:27 lpr.log-20140306
-rw-r----- 1 root log 0 6 mars 14:43 lpr.log-20140307
-rw-r----- 1 root log 0 7 mars 10:51 lpr.log-20140308
-rw-r----- 1 root log 48M 15 mars 11:02 messages.log
-rw-r----- 1 root log 76M 9 mars 11:09 messages.log-20140309
-rw-r----- 1 root log 54M 10 mars 09:45 messages.log-20140310
-rw-r----- 1 root log 69M 11 mars 09:33 messages.log-20140311
-rw-r----- 1 root log 66M 12 mars 09:23 messages.log-20140312
-rw-r----- 1 root log 64M 13 mars 10:12 messages.log-20140313
-rw-r----- 1 root log 77M 14 mars 10:39 messages.log-20140314
-rw-r----- 1 root log 85M 15 mars 01:43 messages.log-20140315
-rw-r--r-- 1 root root 53 14 déc. 2012 ntp.log
-rw-r--r-- 1 root root 5,0K 8 déc. 2012 ntp.log-20121208
-rw-r--r-- 1 root root 1,3K 9 déc. 2012 ntp.log-20121209
-rw-r--r-- 1 root root 1,9K 10 déc. 2012 ntp.log-20121210
-rw-r--r-- 1 root root 4,6K 11 déc. 2012 ntp.log-20121211
-rw-r--r-- 1 root root 9,9K 12 déc. 2012 ntp.log-20121212
-rw-r--r-- 1 root root 5,1K 13 déc. 2012 ntp.log-20121213
-rw-r--r-- 1 root root 2,3K 14 déc. 2012 ntp.log-20121214
drwxr-xr-x 2 root root 4,0K 14 mars 2013 old
-rw-r--r-- 1 root root 2,7M 15 mars 11:00 pacman.log
-rw------- 1 root root 0 2 janv. 2013 preload.log
-rw-r--r-- 1 root root 89K 14 mars 22:42 slim.log
-rw-r----- 1 root log 3,4K 15 mars 01:43 syslog.log
-rw-r----- 1 root log 195 2 mars 10:35 syslog.log-20140302
-rw-r----- 1 root log 454 3 mars 08:14 syslog.log-20140303
-rw-r----- 1 root log 626 4 mars 09:13 syslog.log-20140304
-rw-r----- 1 root log 883 5 mars 09:04 syslog.log-20140305
-rw-r----- 1 root log 711 6 mars 13:10 syslog.log-20140306
-rw-r----- 1 root log 454 7 mars 09:01 syslog.log-20140307
-rw-r----- 1 root log 454 8 mars 09:59 syslog.log-20140308
-rw-r--r-- 1 root root 0 28 avril 2013 update-menus.log
drwxr-xr-x 2 root root 4,0K 15 mars 11:01 uptimed
-rw-r----- 1 root log 865K 15 mars 11:02 user.log
-rw-r----- 1 root log 62K 2 mars 11:50 user.log-20140302
-rw-r----- 1 root log 137K 3 mars 09:33 user.log-20140303
-rw-r----- 1 root log 155K 4 mars 10:42 user.log-20140304
-rw-r----- 1 root log 193K 5 mars 10:23 user.log-20140305
-rw-r----- 1 root log 152K 6 mars 14:41 user.log-20140306
-rw-r----- 1 root log 78K 7 mars 10:50 user.log-20140307
-rw-r----- 1 root log 96K 8 mars 10:18 user.log-20140308
-rw-rw-r-- 1 root utmp 303K 15 mars 11:02 wtmp
-rw-r--r-- 1 root root 24K 15 mars 10:27 Xorg.0.log
-rw-r--r-- 1 root root 24K 14 mars 22:15 Xorg.0.log.old
-rw-r--r-- 1 root users 33K 3 févr. 2013 Xorg.1.log
-rw-r--r-- 1 root users 32K 22 janv. 2013 Xorg.1.log.old
-rw-r--r-- 1 root root 24K 18 août 2013 Xorg.2.log
-rw-r--r-- 1 root bumblebee 14K 8 mars 20:37 Xorg.8.log
-rw-r--r-- 1 root bumblebee 14K 14 févr. 11:17 Xorg.8.log.oldSome files are a bit old, like syslog.log-20140302.
Here is my logrotate.conf:
# see "man logrotate" for details
# rotate log files weekly
daily
# keep 4 weeks worth of backlogs
# garde 7 rotations de logs, 7 jours vu que rotate daily
rotate 7
# La rotation est effectuée, par défaut, même si le fichier est vide afin de faciliter
# # les recherches dans les logs au jour le jour
ifempty
# Insertion de la date dans l'archivage des journaux.
dateext
# restrict maximum size of log files
size 50M
# create new (empty) log files after rotating old ones
create
#Age max avant supression
maxage 7
# uncomment this if you want your log files compressed
#compress
# Logs are moved into directory for rotation
# olddir /var/log/archive
# Ignore pacman saved files
tabooext + .pacorig .pacnew .pacsave
# Arch packages drop log rotation information into this directory
include /etc/logrotate.d
/var/log/wtmp {
monthly
create 0664 root utmp
minsize 1M
rotate 1
}
/var/log/btmp {
missingok
monthly
create 0600 root utmp
rotate 1
}And it's still the default settins in logrotate.d
Do you have any idea why I have this problem ?
Sincerely
Offline
#2 2014-03-15 10:06:12
- progandy
- Member
- Registered: 2012-05-17
- Posts: 5,322
Re: [logrotate] it doesn't rotate the logs anymore
Is cron running?
| alias CUTF='LANG=en_XX.UTF-8@POSIX ' | alias ENGLISH='LANG=C.UTF-8 ' |
Offline
#3 2014-03-15 10:08:53
- djipey
- Member
- Registered: 2011-07-30
- Posts: 159
Re: [logrotate] it doesn't rotate the logs anymore
I would say so, because for everything.log*, the files are rotated. But not for syslog.lo or user.log and some others.
Offline
#4 2014-03-15 13:02:50
- x33a
- Forum Fellow
- Registered: 2009-08-15
- Posts: 4,587
Re: [logrotate] it doesn't rotate the logs anymore
Does
# logrotate -f /etc/logrotate.confwork?
Offline
#5 2014-03-15 13:18:37
- djipey
- Member
- Registered: 2011-07-30
- Posts: 159
Re: [logrotate] it doesn't rotate the logs anymore
Yep, it did remove the old logs. Permissions problem ?
Also, I'm still stuck with this file size limitation. A lot of files exceed 50M.
Offline
#6 2014-03-15 13:22:09
- karol
- Archivist
- Registered: 2009-05-06
- Posts: 25,440
Re: [logrotate] it doesn't rotate the logs anymore
What is in these logs anyway? Is something spamming them? kernel.log of 85 MB is rather big.
Offline
#7 2014-03-15 14:58:10
- djipey
- Member
- Registered: 2011-07-30
- Posts: 159
Re: [logrotate] it doesn't rotate the logs anymore
Actually, now that you mention it, kernel.log and messages.log are full of this particular pattern:
Mar 15 15:30:35 djipey-laptop kernel: ------------[ cut here ]------------
Mar 15 15:30:35 djipey-laptop kernel: WARNING: CPU: 2 PID: 460 at drivers/gpu/drm/i915/intel_pm.c:3555 gen6_set_rps+0x3c0/0x400 [i915]()
Mar 15 15:30:35 djipey-laptop kernel: Modules linked in: bluetooth videodev media usb_storage fuse msr bbswitch(O) nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iptable_filter iptable_mangle ip_tables x_tables joydev snd_hda_codec_hdmi snd_hda_codec_via intel_rapl x86_pkg_temp_thermal intel_powerclamp mousedev kvm crct10dif_pclmul crct10dif_common crc32_pclmul crc32c_intel ghash_clmulni_intel aesni_intel aes_x86_64 lrw gf128mul glue_helper ablk_helper cryptd arc4 mxm_wmi iTCO_wdt iTCO_vendor_support iwldvm mac80211 microcode evdev psmouse serio_raw i2c_i801 iwlwifi cfg80211 r8169 i915 mii rfkill rtsx_pci_ms memstick thermal battery intel_agp intel_gtt snd_hda_intel video drm_kms_helper wmi drm ac snd_hda_codec button snd_hwdep snd_pcm i2c_algo_bit snd_page_alloc i2c_core snd_timer snd mei_me soundcore processor
Mar 15 15:30:35 djipey-laptop kernel: shpchp mei lpc_ich vboxnetflt(O) vboxnetadp(O) vboxdrv(O) coretemp ext4 crc16 mbcache jbd2 sd_mod hid_logitech_dj usbhid hid rtsx_pci_sdmmc mmc_core atkbd libps2 rtsx_pci ahci libahci libata scsi_mod xhci_hcd ehci_pci ehci_hcd usbcore usb_common i8042 serio [last unloaded: bluetooth]
Mar 15 15:30:35 djipey-laptop kernel: CPU: 2 PID: 460 Comm: X Tainted: G W O 3.13.6-1-ARCH #1
Mar 15 15:30:35 djipey-laptop kernel: Hardware name: CLEVO CO. W2xxHSQ /W2xxHSQ , BIOS 4.6.4 12/09/2011
Mar 15 15:30:35 djipey-laptop kernel: 0000000000000009 ffff8800c0dbbb88 ffffffff81513274 0000000000000000
Mar 15 15:30:35 djipey-laptop kernel: ffff8800c0dbbbc0 ffffffff81061a3d ffff8800c3f14000 000000000000000d
Mar 15 15:30:35 djipey-laptop kernel: 0000000000000001 00000000070d0000 ffff8800c5d0f800 ffff8800c0dbbbd0
Mar 15 15:30:35 djipey-laptop kernel: Call Trace:
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffff81513274>] dump_stack+0x4d/0x6f
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffff81061a3d>] warn_slowpath_common+0x7d/0xa0
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffff81061b1a>] warn_slowpath_null+0x1a/0x20
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffffa067f860>] gen6_set_rps+0x3c0/0x400 [i915]
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffffa067fe00>] gen6_rps_boost+0x40/0x70 [i915]
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffffa0635758>] __wait_seqno+0x4f8/0x590 [i915]
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffff810a2c30>] ? __wake_up_sync+0x20/0x20
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffffa063d024>] i915_gem_set_domain_ioctl+0x164/0x250 [i915]
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffffa0552bf2>] drm_ioctl+0x502/0x630 [drm]
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffff81086045>] ? enqueue_hrtimer+0x25/0xb0
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffff81086a34>] ? __hrtimer_start_range_ns+0x1e4/0x3d0
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffff811b6080>] do_vfs_ioctl+0x2e0/0x4c0
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffff811b62e1>] SyS_ioctl+0x81/0xa0
Mar 15 15:30:35 djipey-laptop kernel: [<ffffffff815216ad>] system_call_fastpath+0x1a/0x1f
Mar 15 15:30:35 djipey-laptop kernel: ---[ end trace 0abaf2a169c1915c ]---
Mar 15 15:30:36 djipey-laptop kernel: ------------[ cut here ]------------What it that ?
Offline
#8 2014-03-15 17:58:32
- x33a
- Forum Fellow
- Registered: 2009-08-15
- Posts: 4,587
Re: [logrotate] it doesn't rotate the logs anymore
The above seems to be a graphics related problem. You should open a separate thread for that.
As for the logrotate problem, are you running a logging daemon, such as syslog-ng? Basically I want to know if you have a file inside /etc/logrotate.d, which handles the rotation rules for various log files such as kernel.log, user.log, etc.
Last edited by x33a (2014-03-15 17:58:51)
Offline
#9 2014-03-16 12:18:38
- djipey
- Member
- Registered: 2011-07-30
- Posts: 159
Re: [logrotate] it doesn't rotate the logs anymore
yes I use syslog-ng as a logging daemon, and there are files in /etc/logrotate.d:
total 24K
-rw-r--r-- 1 root root 309 23 juil. 2013 clamav
-rw-r--r-- 1 root root 171 12 juil. 2013 cups
-rw-r--r-- 1 root root 63 26 janv. 11:34 lirc
-rw-r--r-- 1 root root 180 23 juil. 2013 preload
-rw-r--r-- 1 root root 122 28 mai 2013 slim
-rw-r--r-- 1 root root 457 28 mai 2013 syslog-ngsyslog-ng:
/var/log/messages.log /var/log/auth.log /var/log/mail.log /var/log/kernel.log /var/log/errors.log /var/log/daemon.log /var/log/user.log /var/log/iptables.log /var/log/everything.log /var/log/syslog.log /var/log/acpid.log /var/log/crond.log /var/log/lpr.log /var/log/uucp.log /var/log/news.log /var/log/ppp.log /var/log/debug.log {
missingok
sharedscripts
postrotate
/bin/kill -HUP $(cat /run/syslog-ng.pid 2>/dev/null) 2>/dev/null || true
endscript
}Offline
#10 2014-03-16 12:51:23
- x33a
- Forum Fellow
- Registered: 2009-08-15
- Posts: 4,587
Re: [logrotate] it doesn't rotate the logs anymore
The syslog-ng contents look fine.
Since the logs seem to have stopped rotating around 8th march, I would say you start looking at what you did near that date.
The permissions look fine as well. Look into what packages were updated around that date. Probably, something related to logrotate or cron.
Last edited by x33a (2014-03-16 12:52:11)
Offline
#11 2014-03-19 08:11:30
- djipey
- Member
- Registered: 2011-07-30
- Posts: 159
Re: [logrotate] it doesn't rotate the logs anymore
I did nothing really important this date. The thing is I don't know if it's because of the bug with my video driver that my logs exceed 50 M. Maybe before I didn't encounter the problem. In fact, logrotate doesn't limit the size of my files.
Offline