From owner-freebsd-questions@FreeBSD.ORG Wed Aug 13 19:07:58 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 03A671065675 for ; Wed, 13 Aug 2008 19:07:58 +0000 (UTC) (envelope-from brie.gordon@gmail.com) Received: from rv-out-0506.google.com (rv-out-0506.google.com [209.85.198.225]) by mx1.freebsd.org (Postfix) with ESMTP id D6B2D8FC1B for ; Wed, 13 Aug 2008 19:07:57 +0000 (UTC) (envelope-from brie.gordon@gmail.com) Received: by rv-out-0506.google.com with SMTP id b25so184161rvf.43 for ; Wed, 13 Aug 2008 12:07:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=nXv37+I/5VbxtoYQu7NwJGtDN3aErU85rea4ecHXlDM=; b=F4jEssX4JOFYUGFm7efNlS9t90NwrhG4NrU4lRZ4c3vAII5+HslGzJ2LhQ5yGBU5BX tJ/EPfRrnXuPl6i/2XT33QmcpvLe4UiP50/Osr0EwCki3/8fhuL9IFOfN+tDXSCeT8do vxtP9FUBwWTkCWHWvix4ANWX6WnV8h4lDBqrU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=VQps5SGx5gXi4UlK9O6LdKh32vy7Z1M1ciN7UANf3o6lLP5oHoK3b3cAWYFoj06sA3 GyayB+3uZs7X7A36KgMbHVuOqA8b4hzz0+qThDnEwQ3c3edxPaRfAjYDXzHeeFan6fV7 W6BoS9cZbB5WNnrpgAqASfF8o/V+h+WmrHRQ4= Received: by 10.141.21.6 with SMTP id y6mr145552rvi.226.1218654477348; Wed, 13 Aug 2008 12:07:57 -0700 (PDT) Received: by 10.140.166.12 with HTTP; Wed, 13 Aug 2008 12:07:57 -0700 (PDT) Message-ID: Date: Wed, 13 Aug 2008 15:07:57 -0400 From: "Brie Gordon" To: "Bill Moran" , freebsd-questions@freebsd.org In-Reply-To: <20080813190356.GY71785@hal.rescomp.berkeley.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <20080813184603.GA25990@hal.rescomp.berkeley.edu> <20080813145945.80d08986.wmoran@potentialtech.com> <20080813190356.GY71785@hal.rescomp.berkeley.edu> Cc: Subject: Re: Lots of accounting data X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Aug 2008 19:07:58 -0000 On Wed, Aug 13, 2008 at 3:03 PM, Christopher Cowart wrote: > Bill Moran wrote: >> In response to Christopher Cowart : >>> I only really see two options, neither of which I particularly like: >>> * Throw more disk at the problem (but given what I've seen, I don't >>> like the odds that within a month or two, I'll realize I didn't give >>> it enough). >>> * Turn off accounting on these boxes. >> >> * Rotate and compress more frequently; and store less history? > > The compressed history amounts to nothing in comparison (1.5GB per file > as opposed to 17GB). I suppose I could configure our hourly logrotate to > replace the functionality of /etc/periodic/daily/310.accounting. Sounds > like a viable solution to me. > > Thanks, > > -- > Chris Cowart > Network Technical Lead > Network & Infrastructure Services, RSSP-IT > UC Berkeley > Could you dedicate a server to holding logs? (In addition to the compression?) -- Regards, Brie A. Gordon A Linux Chica http://granite.sru.edu/~bag6849/index.html