From owner-freebsd-questions@freebsd.org Tue Dec 25 13:39:47 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8E4591352D3E for ; Tue, 25 Dec 2018 13:39:47 +0000 (UTC) (envelope-from vas@mpeks.tomsk.su) Received: from admin.sibptus.ru (admin.sibptus.ru [IPv6:2001:19f0:5001:21dc::10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D3FC975EC8 for ; Tue, 25 Dec 2018 13:39:46 +0000 (UTC) (envelope-from vas@mpeks.tomsk.su) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sibptus.ru; s=20181118; h=Message-ID:Subject:To:From:Date:In-Reply-To; bh=L056nTumCsMzgsu5C+Yr1kGTuoI2lirgKv3y/axpvW0=; b=cuOh1wY7D+QQwAX0kGGYPdIfsR CNyJek5zF9scSTgW5a5W5Tlt0xAI/RPT9AW5GsKM9AhclImZVGK67VQ8z8wXqTUWmw/d8aQS7RibQ TqaMmupPn1q68oU+5E0ux/7Gu8FrLyJE0DD5PAuT1614X8o0cj+sqPjYZDm7mgjebo/Q=; Received: from vas by admin.sibptus.ru with local (Exim 4.91 (FreeBSD)) (envelope-from ) id 1gbmvw-000JhN-HB for freebsd-questions@freebsd.org; Tue, 25 Dec 2018 20:39:44 +0700 Date: Tue, 25 Dec 2018 20:39:44 +0700 From: Victor Sudakov To: freebsd-questions@freebsd.org Subject: newsyslog gone mad Message-ID: <20181225133944.GA75676@admin.sibptus.ru> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="dDRMvlgZJXvWKvBx" Content-Disposition: inline X-PGP-Key: http://www.dreamwidth.org/pubkey?user=victor_sudakov X-PGP-Fingerprint: 10E3 1171 1273 E007 C2E9 3532 0DA4 F259 9B5E C634 User-Agent: Mutt/1.10.1 (2018-07-13) Sender: Victor Sudakov X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Dec 2018 13:39:47 -0000 --dDRMvlgZJXvWKvBx Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Dear Colleagues, On one of my Web servers, newsyslog went mad and sliced up the logs into hundreds of thousands of small files like =2E/access_log.2.gz.13.gz.1.gz =2E/access_log.2.gz.5.gz.3.gz.7.gz =2E/access_log.2.gz.8.gz.3.gz =2E/access_log.2.gz.9.gz.2.gz =2E/access_log.2.gz.8.gz.1.gz.1.gz =2E/access_log.3.gz.1.gz.1.gz.1.gz.1.gz.1.gz.4.gz =2E/access_log.3.gz.1.gz.1.gz.1.gz.1.gz.1.gz.1.gz =2E/access_log.3.gz.1.gz.1.gz.1.gz.1.gz.1.gz.1.gz.2.gz =2E/access_log.2.gz.5.gz.1.gz.2.gz.1.gz.0.gz =2E/access_log.2.gz.13.gz.0.gz =2E/access_log.3.gz.1.gz.1.gz.1.gz.1.gz.1.gz.1.gz.1.gz =2E/access_log.2.gz.6.gz.1.gz.5.gz.0.gz =2E/access_log.3.gz.1.gz.1.gz.1.gz.2.gz.2.gz Most of those files are one- or two-liners only with=20 Nov 1 00:00:00 www2 newsyslog[8804]: logfile turned over Dec 1 00:00:00 www2 newsyslog[72418]: logfile turned over in them. What was that?=20 Here is the relevant line from /etc/newsyslog.conf: /usr/home/www/*/logs/* 644 24 * @01T00 GZ /var/run/h= ttpd.pid --=20 Victor Sudakov, VAS4-RIPE, VAS47-RIPN 2:5005/49@fidonet http://vas.tomsk.ru/ --dDRMvlgZJXvWKvBx Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJcIjMgAAoJEA2k8lmbXsY0bmcH/ihGcN4kXxcSQ8Umz+XfSQYy Kx960hFuDH340W+GsTnUX62OQbdWGU+htnred6RsJB9OKDzMNnC9Em9bMFJ3LN+7 hpvtjVxT4xDKFVLZiiuAdv2fUFkAbTn2Tt5KveAAVUgfVnb0B5xcXVpOxk2uqt5v l7elm303hJ3vXLOy+gO2aYGLGMTRA76skWYMgUoQqpks74uAFcBWHvcCuu/FzUxP rxB1mJ35el3TBddz7Ddssbh9UIDezBmtX6jH+xNprYweLwyo8IUOlXodW1D/Gfry bZEEwByhE9wAse5bIlRUTRGeyVGmORW8GQtrsWon3468gLilWPuZ2+iagD3w+dE= =21RB -----END PGP SIGNATURE----- --dDRMvlgZJXvWKvBx--