[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

eine Datei wir von logrotate nicht verarbeitet

Hallo,
ich habe das Problem das eine Darei logstash.log nicht "umgepackt" wird.
Logrotate meldet das die Datei rotiert werden muss aber es passiert nichts.
Die Datei logsstash.stout wird wie erwartet bearbeitet. logrotate ist also aktiv. 
Warum wird die Datei nicht angefasst?

Gruss und Danke

Ralf





/var/log/logstash/logstash.stdout {
        daily
        rotate 7
        copytruncate
        compress
        delaycompress
        missingok
        notifempty
}


/var/log/logstash/logstash.log {
        daily
        create 0644 root utmp
       rotate 7
        copytruncate
        compress
        delaycompress
        missingok
        notifempty
        size 100
}





      2 4.0K drwxr-xr-x  3 logstash root 4.0K Jun 19 10:44 .
1042607 4.0K drwxr-xr-x 14 root     root 4.0K Jun 19 06:25 ..
1048578    0 -rw-r--r--  1 root     root    0 Jun 17 09:22 logstash.err
     26  93G -rw-r--r--  1 root     root  93G Jun 17 09:22 logstash.log
     13 4.0K -rw-r--r--  1 root     root  514 Oct 19  2016 logstash.log.1
   8193    0 -rw-r--r--  1 root     root    0 Oct 20  2016 logstash.log.1.gz
     20 4.0K -rw-r--r--  1 root     root  813 Oct 18  2016 logstash.log.2.gz
     15 4.0K -rw-r--r--  1 root     root  476 Oct 16  2016 logstash.log.3.gz
     21 8.0K -rw-r--r--  1 root     root 5.5K Oct 15  2016 logstash.log.4.gz
     18 4.0K -rw-r--r--  1 root     root 3.6K Oct 14  2016 logstash.log.5.gz
     25 4.0K -rw-r--r--  1 root     root 3.2K Oct 13  2016 logstash.log.6.gz
     17 8.0K -rw-r--r--  1 root     root 5.4K Oct 12  2016 logstash.log.7.gz
     19    0 -rw-r--r--  1 root     root    0 Jun 19 10:44 logstash.log.8.gz
1048582    0 -rw-r--r--  1 root     root    0 Jun 17 06:25 logstash.stdout
     12 657M -rw-r--r--  1 root     root 657M Jun 17 06:25 logstash.stdout.1
16 1.5M -rw-r--r-- 1 root root 1.5M Jun 16 06:25 logstash.stdout.2.gz 14 2.0M -rw-r--r-- 1 root root 2.0M Jun 14 06:25 logstash.stdout.3.gz 22 1.1M -rw-r--r-- 1 root root 1.1M Jun 13 06:25 logstash.stdout.4.gz 27 1.9M -rw-r--r-- 1 root root 1.9M Jun 10 06:25 logstash.stdout.5.gz 24 1.9M -rw-r--r-- 1 root root 1.9M Jun 8 06:25 logstash.stdout.6.gz 23 1.4M -rw-r--r-- 1 root root 1.4M Jun 7 06:25 logstash.stdout.7.gz 
     11  16K drwx------  2 root     root  16K Mar 10  2016 lost+found
root@srvredis01:/var/log/logstash#

root@srvredis01:/etc/init.d# logrotate -f -d -v /etc/logrotate.d/logstash
reading config file /etc/logrotate.d/logstash

Handling 2 logs
rotating pattern: /var/log/logstash/logstash.stdout forced from command line (7 rotations) 
empty log files are not rotated, old logs are removed
considering log /var/log/logstash/logstash.stdout
  log does not need rotating
rotating pattern: /var/log/logstash/logstash.log forced from command line (7 rotations) 
empty log files are not rotated, old logs are removed
considering log /var/log/logstash/logstash.log
  log needs rotating
rotating log /var/log/logstash/logstash.log, log->rotateCount is 7
dateext suffix '-20170619'
glob pattern '-[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]'
compressing log with: /bin/gzip
renaming /var/log/logstash/logstash.log.7.gz to /var/log/logstash/logstash.log.8.gz (rotatecount 7, logstart 1, i 7), renaming /var/log/logstash/logstash.log.6.gz to /var/log/logstash/logstash.log.7.gz (rotatecount 7, logstart 1, i 6), renaming /var/log/logstash/logstash.log.5.gz to /var/log/logstash/logstash.log.6.gz (rotatecount 7, logstart 1, i 5), renaming /var/log/logstash/logstash.log.4.gz to /var/log/logstash/logstash.log.5.gz (rotatecount 7, logstart 1, i 4), renaming /var/log/logstash/logstash.log.3.gz to /var/log/logstash/logstash.log.4.gz (rotatecount 7, logstart 1, i 3), renaming /var/log/logstash/logstash.log.2.gz to /var/log/logstash/logstash.log.3.gz (rotatecount 7, logstart 1, i 2), renaming /var/log/logstash/logstash.log.1.gz to /var/log/logstash/logstash.log.2.gz (rotatecount 7, logstart 1, i 1), renaming /var/log/logstash/logstash.log.0.gz to /var/log/logstash/logstash.log.1.gz (rotatecount 7, logstart 1, i 0), 
copying /var/log/logstash/logstash.log to /var/log/logstash/logstash.log.1
truncating /var/log/logstash/logstash.log
removing old log /var/log/logstash/logstash.log.8.gz
root@srvredis01:/etc/init.d#
Reply to: