Date: Fri, 3 Oct 2003 09:33:23 -0500 From: Redmond Militante <r-militante@northwestern.edu> To: Jens Rehsack <rehsack@liwing.de> Cc: freebsd-questions@freebsd.org Subject: Re: var partition is too small Message-ID: <20031003143323.GC80565@darkpossum> In-Reply-To: <3F7D8734.2060801@liwing.de> References: <20031003140043.GB80565@darkpossum> <3F7D8734.2060801@liwing.de>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] hi a cron job that moves httpd-access.logs to an archive directory sounds like a fine idea - is it safe, though to move these logs while apache and syslogd are running? or would the cron job need to stop those apps first, move the logs, then restart apache/syslogd? thanks redmond [Fri, Oct 03, 2003 at 02:27:00PM +0000] This one time, at band camp, Jens Rehsack said: > Redmond Militante wrote: > >hi all > > > >the var partition on my apache box may be too small. > >this is a problem because - > >i originally had newsyslog set at > > > >/var/log/httpd-access.log 644 7 100 24 B > >/var/run/httpd.pid 30 > > > >which sets httpd-access.log to be rotated in binary format everytime it > >reaches 100 mb or once every hour for 24 hours. > >which basically means we only archive less than a day's worth of > >httpd-access.log's on this machine... > > > > > >the /var partition on this machine is 252 mb. > > Looks like sysinstalls defaults. > Maybe this should be fixed some fine day :-) > > >yesterday i was told asked to start archiving httpd-access.logs for > >analysis over longer periods of time - that i should be keeping a year's > >worth of logs, if possible. i remember the original reason i set up > >newsyslog.conf to rotate httpd-access.logs on this machine so frequently > >is because the webserver is really busy, and this file tends to grow > >pretty rapidly, and i didn't want to have to log in, stop apache, and > >archive the logs by hand every day... > > > >yesterday i looked into expanding the size of my /var partition by > >symlinking. > > > >-drop to single user mode > >-stop syslogd > >-mv /var to /usr/var > >-umount /var > >-delete /var directory > >-create symlink from /usr/var to /var > > That's really bad, because this means that there will be permanent > write accesses to you /usr label. > > A better way could be a cron job which moves the old http-logs > once a day into a place in /usr, eg. /usr/save-logs. > > >it seems easy, and i did it successfully once, but i hosed a > >(non)production box yesterday practicing the above procedure. > > > >i have a number of questions: > >-if i copy the contents of /var to /usr/var, then delete the var > >directory, do i need to modify my fstab? > > If you've done it as described, that would be better. > But I think you should re-think about the procedure. > > >my fstab right now looks like > > > >/dev/aacd0s1g /usr ufs rw 2 2 > >/dev/aacd0s1e /var ufs rw 2 2 > > > >-do i need to modify this so that /var now points to a directory inside > >/usr? and how? > >-i'm thinking that this may be too risky a procedure to try on a > >production box (i guess i'm spooked from ruining the practice box...) - > >anyone think i should just archive these logs by hand to someplace in my > >home directory (/usr is very large on this box - 65 gb - and hardly used)? > >my goal is basically to keep an archive of httpd-access.logs for as long > >as possible to produce a comprehensive webalizer report... > > > >thanks again > > > >redmond > > Best, > Jens > -- FreeBSD 5.1-RELEASE-p5 FreeBSD 5.1-RELEASE-p5 #0: Wed Sep 24 09:12:23 CDT 2003 9:30AM up 1 day, 18:54, 2 users, load averages: 0.07, 0.17, 0.18 Rules for Academic Deans: (1) HIDE!!!! (2) If they find you, LIE!!!! -- Father Damian C. Fandal [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (FreeBSD) iD8DBQE/fYiy7g+NJl/fSB0RAuQ9AJ9/j0HzAzWtLcpYqgx8kEDu+vbaNQCggxqH /pbW4GJRx6SJRyk0JKBrKV0= =IgeB -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031003143323.GC80565>