Re: Syslog-NG

[David <david.g_jones@ntlworld.com>]

On Fri, 2016-06-03 at 08:16 +0100, Joe wrote:
> On Fri, 03 Jun 2016 07:42:46 +0100
> David <david.g_jones@ntlworld.com> wrote:
> 
> > Dear Group,
> > 
> > I am running Syslog-ng on a Raspberry Pi, it stores the data sent to
> > it on a 64G memory stick. It's working very well.
> > 
> > I retrieve the syslog file by SSHing into the Pi and copying the file
> > to my main PC.
> > 
> > The problem I have is that the file has now grown to 3.7G and normal
> > text editors wont open it.
> > 
> > Can anybody recommend a text editor or text viewer that will work with
> > large files?
> 
> If all else fails, you can cut the file into chunks. The split and cat
> utilities are one way to break and join files.
> 
> > 
> > The solution going forward is to get Syslog-ng to start a new file
> > every month, anybody know if this is possible?
> > 
> 
> Logrotate is the log management utility, syslog-ng doesn't need to deal
> with this. The syslog-ng on my server saves to standard /var/log system
> files, so that all happens automatically.
> 
> If you're saving to a specific new file, you need a new logrotate.conf
> entry, preferably a new file in /etc/logrotate.d.
> 
Dear Joe and Andrew,

Thank you for the very helpful advice.

I've used the split command and now have lots of smaller chunks.

Next to try the rotate to keep the original files to a manageable size.

regards,

David.