Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 12 Aug 2007 05:41:07 -0700
From:      David Wolfskill <david@catwhisker.org>
To:        Artis Caune <Artis.Caune@latnet.lv>, FreeBSD-hackers@freebsd.org
Subject:   Re: [PATCH] newsyslog - don't compress first log file
Message-ID:  <20070812124107.GF77008@bunrab.catwhisker.org>
In-Reply-To: <20070812122420.GC1438@roadrunner.spoerlein.net>
References:  <46BC49DB.8060509@latnet.lv> <20070810161318.GX77008@bunrab.catwhisker.org> <20070812122420.GC1438@roadrunner.spoerlein.net>

next in thread | previous in thread | raw e-mail | index | archive | help

--nJFBJCcSkptt2CoF
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Aug 12, 2007 at 02:24:20PM +0200, Ulrich Spoerlein wrote:
> ...
> > We have a requirement to retain some number of logfiles, but only
> > compress those older than the Nth generation.
> >=20
> > Thus, we might retain 90 "rotated" generations of the log file, of which
> > the oldest 50 are compressed, while the newest 40 are not.
>=20
> Sorry, to be so blunt, but I think this .N suffix is a stupid approach
> for archival purposes. You never know which time span is included in the
> file foo.17.gz.

First, no problem with being blunt; it facilitates communication.  :-)

That said, we're not keeping the files for particularly long, so
"archival" isn't an issue for us.

It's merely that the files are extremely compressible (compressed size
is about 12% the original), but for various reasons outside the control
of those of us who run the machines, we need to keep some number of the
most recent of them uncompressed.

> I'd rather see an extension for newsyslog which would rotate foo to
> foo.2007-08-12.gz, iff rotation is done every day at midnight.
>=20
> That way, you get a 'stable' name, which makes it easier to find the
> logfile for 1999-12-31 or 2000-01-01 some years from now.

And on the other hand, to find the log for 3 days ago, you need to have
a better idea of the current date than I generally do unless I check
(either my watch or `date`).  :-}  So there are trade-offs.  :-}

Then again, I'm rather in the habit of using "ls -ltr ...." when I'm
interested in the more recent of a set of files.

> Right now, I have to use syslog-ng for that purpose.

Well, I certainly wouldn't object to the existence of such a feature,
whether or not I'd use it myself.  :-)

Peace,
david

--=20
David H. Wolfskill				david@catwhisker.org
Anything and everything is a (potential) cat toy.

See http://www.catwhisker.org/~david/publickey.gpg for my public key.

--nJFBJCcSkptt2CoF
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (FreeBSD)

iEYEARECAAYFAka+/+IACgkQmprOCmdXAD0xqQCeLnABUKXUDuGSSPj9S++vJYIp
5lQAn3yVbJ2lSekx0KPUmJZ6JMmOOzkp
=2Vwp
-----END PGP SIGNATURE-----

--nJFBJCcSkptt2CoF--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070812124107.GF77008>