RE: Logging/ Logrotate Problem
Thanks for your help. I will try to reduce named logging.
Now i have disabled logging for iptables, auth, debug, user,
mail.info and mail.err and mail.warn in /etc/syslog.conf,
so the logfiles aren´t growing so fast. I have viewed them
before and hope it is ok to disable, i will see.
Stefan Drees
> -----Ursprüngliche Nachricht-----
> Von: nate [mailto:debian-user@aphroland.org]
> Gesendet: Montag, 10. März 2003 23:05
> An: debian-user@lists.debian.org
> Betreff: Re: Logging/ Logrotate Problem
>
>
> Stefan Drees said:
> > Hi,
> > i have set up my first debian server and everything runs
> > fine, for one week :-(. The machine stops working, logcheck
> > consums must of the cpu time, because daemon.log and syslog
> > have grown up to 1GB in size. I deleted them, but a few hours
> > later they have grown up to 10MB. Here are my questions:
> > 1) How can i reduce the logging? Named, postfix and iptables are
> > generating the most messages.
>
> BIND has a ton of logging options, see the documentation for
> named.conf. Postfix I'm not aware of any logging options for it.
> iptables, turn off logging for the rules that get excessive number
> of hits.
>
> > 2) Why are some logfiles rotated via logrotate and others via cron?
> > For example sysklogd is rotate via cron.weekly and i
> don´t know and
> > which size the log is rotated and how many backups it keeps?
>
> I personally consider that a bug, since logrotate seems to be part
> of the core of debian(in potato at least, when doing a
> minimum install,
> that is not selecting any packages, logrotate got installed. not
> sure about woody).
>
> > 3) It is possible that all iptables messages are writen in one file?
>
> try the syslog-ng package, it provides fine grained filters for
> sorting log files. I use a syslog server on my networks and filter
> logs from everything.
>
> 4) What is /var/log/setuid.changes for?
>
> I think it's for tracking setuid files. Not sure though, never really
> looked at it.
>
> nate
>
>
>
>
> --
> To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
Reply to: