Arch Linux

bugsmanagement

Member

Registered: 2017-04-21

Posts: 201

logrotate retains original log file after compressing.

audit          auth.log.3.gz  daemon.log.1.gz  daemon.log.4.gz  errors.log.3.gz      everything.log.2.gz  gssproxy         kernel.log.3     libvirt            messages.log.3     pacman.log       syslog.log.2     tallylog       user.log.3.gz
auth.log       auth.log.4     daemon.log.2     errors.log       errors.log.4         everything.log.3     journal          kernel.log.3.gz  lxd                messages.log.3.gz  private          syslog.log.2.gz  user.log       user.log.4
auth.log.1.gz  auth.log.4.gz  daemon.log.2.gz  errors.log.1.gz  errors.log.4.gz      everything.log.3.gz  kernel.log       kernel.log.4     messages.log       messages.log.4     sa               syslog.log.3     user.log.1.gz  user.log.4.gz
auth.log.2     btmp           daemon.log.3     errors.log.2     everything.log       everything.log.4     kernel.log.1.gz  kernel.log.4.gz  messages.log.1.gz  messages.log.4.gz  swtpm            syslog.log.3.gz  user.log.2     webmin
auth.log.2.gz  btmp.1.gz      daemon.log.3.gz  errors.log.2.gz  everything.log.1.gz  everything.log.4.gz  kernel.log.2     lastlog          messages.log.2     nginx              syslog.log       syslog.log.4     user.log.2.gz  wtmp
auth.log.3     daemon.log     daemon.log.4     errors.log.3     everything.log.2     glusterfs            kernel.log.2.gz  letsencrypt      messages.log.2.gz  old                syslog.log.1.gz  syslog.log.4.gz  user.log.3

Hello,

I am having trouble determining why logrotate is retaining the log file and not delete after compressing them for syslog-ng? Why is the behavior different for syslog-ng?

/var/log/messages.log /var/log/auth.log /var/log/mail.log /var/log/kernel.log /var/log/errors.log /var/log/daemon.log /var/log/user.log /var/log/iptables.log /var/log/everything.log /var/log/syslog.log /var/log/acpid.log /var/log/crond.log /var/log/lpr.log /var/log/uucp.log /var/log/news.log /var/log/ppp.log /var/log/debug.log {
        missingok
        sharedscripts
        postrotate
                /bin/kill -HUP $(cat /run/syslog-ng.pid 2>/dev/null) 2>/dev/null || true
        endscript
}

Kind regards.

EDIT: Perhaps the behavior is different because the missing compress option, so logrotate is rotating the files and the global compress option is then compressing the files.

Last edited by bugsmanagement (2019-07-14 22:56:10)