From owner-freebsd-arch Fri Feb 14 19:44:51 2003 Delivered-To: freebsd-arch@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5364F37B401 for ; Fri, 14 Feb 2003 19:44:49 -0800 (PST) Received: from smtp1.server.rpi.edu (smtp1.server.rpi.edu [128.113.2.1]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6239A43FA3 for ; Fri, 14 Feb 2003 19:44:48 -0800 (PST) (envelope-from drosih@rpi.edu) Received: from [128.113.24.47] (gilead.netel.rpi.edu [128.113.24.47]) by smtp1.server.rpi.edu (8.12.7/8.12.7) with ESMTP id h1F3ikF4008768; Fri, 14 Feb 2003 22:44:46 -0500 Mime-Version: 1.0 X-Sender: drosih@mail.rpi.edu Message-Id: In-Reply-To: <3E4D7C2B.DDFC9DBE@mindspring.com> References: <20030210114930.GB90800@melusine.cuivre.fr.eu.org> <20030213174531.GZ83215@roark.gnf.org> <20030213184309.GA53098@melusine.cuivre.fr.eu.org> <200302141100.23529.wes@softweyr.com> <20030214220145.GM83215@roark.gnf.org> <3E4D7C2B.DDFC9DBE@mindspring.com> Date: Fri, 14 Feb 2003 22:44:45 -0500 To: Terry Lambert , Gordon Tetlow From: Garance A Drosihn Subject: Re: syslog.conf syntax change (multiple program/host specifications) Cc: arch@FreeBSD.ORG Content-Type: text/plain; charset="us-ascii" ; format="flowed" X-RPI-Spam-Score: -1.9 () IN_REP_TO,QUOTED_EMAIL_TEXT,REFERENCES,SIGNATURE_SHORT_DENSE,SPAM_PHRASE_01_02 X-Scanned-By: MIMEDefang 2.28 Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG At 3:30 PM -0800 2/14/03, Terry Lambert wrote: >Gordon Tetlow wrote: >> From newsyslog(8): > > > > -F Force newsyslog to trim the logs, even if the trim > > conditions have not been met. This option is useful > > for diagnosing system problems by providing you with > > fresh logs that contain only the problems. > >Not really useful. > >For example, we had a system where cron would occasionally die, Note that what we are saying is that syslog would execute newsyslog, at the moment syslog notes the logfile has grown too large. Newsyslog would be told to "rotate this file now". So, it wouldn't matter if cron dies. And the log would be rotated right after the first syslog write which caused the file to pass the size limit. >Only newsyslog is stupid. > >No matter what options you gave it, the first thing it would do is >the moral equivalent of -F. > >So instead of a 60M Samba log file "/var/log/samba", you ended up >with a "/var/log/samba.1" that was 60M, and a "/var/log/samba" >that was empty. I still have some message squirrelled away where you describe this problem. I do agree this would be good to fix. It seems to me that would be separate from the Wes's syslog change. Ie, it's good to fix this whether or not Wes's change goes in, and it's good for Wes's change to go in whether or not this is fixed. >I would really object to rolling this same thing into syslog, >without fixing this first. Some people talked about (basically) moving all of newsyslog functions into syslog, but I don't think we are heading that way. We're now just talking about having syslog run newsyslog on a specific logfile. -- Garance Alistair Drosehn = gad@gilead.netel.rpi.edu Senior Systems Programmer or gad@freebsd.org Rensselaer Polytechnic Institute or drosih@rpi.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message