{ "created": "2015-12-20T19:56:47Z", "hierarchy": [ { "name": "ROOT", "type": "folder", "uri": "/ROOT" }, { "name": "Logrotate Notes", "type": "article", "uri": "Logrotate_Notes" } ], "html": "\n\n \n \n \n \n \n \n \n \n \n \n \n Logrotate Notes – Nikhil's Personal Wiki\n \n \n \n \n \n
\n
\n \n
\n
\n \n \n\n

Logrotate Notes\n \n

\n

This is a quick overview of logrotate which… umm… rotates log
\nfiles. This was written for CentOS/RHEL 5.5.

\n

Pertinent Files & Directories

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
File/DirPurpose
/usr/sbin/logrotateThe command itself.
/etc/cron.daily/logrotateBash script that executes the logrotate command every day.
/etc/logrotate.conf and /etc/logrotate.d/Rotation defaults if they are not defined for specific daemons. You can add rotate configs to this file, or put them in /etc/logrotate.d
/var/lib/logrotate.statusShow when the specified log files were last rotated.
\n

Logrotate Options

\n

Quite simple, really. The man page elucidates all available options.
\nHere’s a quick table of what the most commonly used ones do.

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
OptionPurpose
rotate <number>Keep specified number of logfiles before they are deleted and/or emailed to admin
size=<number>Rotate logs when they reach this size.
This is done ‘‘without regard’’ for the last rotated time.
Use minsize <number> if you’d like to balance both time and size.
Bytes are used without a specifier. 100k, 100M are also fine.
dailyRotate daily. This is the default minimum granularity, unless you move /etc/cron.daily/logrotate to /etc/cron.hourly/logrotate
weeklyRotate weekly
monthlyRotate monthly
notifemptyDon’t rotate if empty (the reverse, ifempty, is default)
missingokIf log file is missing for some reason, move on without error
compressCompress logfile after rotation.
Default is gzip with -9 (maximum) compression.
The choice of compression program can be changed with compresscmd (e.g. compresscmd bzip2).
To pass options (like compression level), use compressoptions.
To change extension of compressed file, use compressext
dateextUse YYYYMMDD format instead of just tacking on numbers (like .0, .1 and so on) to the rotated files.
mail <recipient>Email recipient the file that will be deleted after a rotation cycle
create <mode> <owner> <group>Create logfiles with the specified permissions and owner:group attributes.
olddir <directory>Move all but the newest log file to this directory (nice to keep things organized)
\n

Other (kinda important) options

\n

You’ll see these used with Apache, for instance.

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
OptionPurpose
prerotateExecute the a script ‘‘before’’ rotating a log. Should end this with endscript.
postrotateExecute the a script ‘‘after’’ rotating a log. Should end this with endscript.
sharedscriptsMake sure that the script(s) specified in prerotate and/or postrotate run just ‘‘once’’ (i.e. not for ‘’every’’ logfile)
delaycompressDon’t compress yesterday’s logfile (if daily… you get the picture)
\n

Example

\n

Here’s a real-world application of the above. I want to rotate an
\nalready huge log of OpenVPN connections (~32M in size) like so:

\n\n

The logfile is at /var/log/openvpn/connections.log. Here’s the
\nconfiguration file I created for the above. It’s /etc/logrotate.d/openvpn:

\n
/var/log/openvpn/connections.log {  \n    daily  \n    rotate 60  \n    dateext  \n    compress  \n    olddir /var/log/openvpn/old  \n  \n    nomail  \n    missingok  \n    notifempty  \n    delaycompress  \n    create 640 root root  \n}\n
\n

To test this, I run:

\n
logrotate -d /etc/logrotate.d/openvpn\n
\n

The -d switch runs it in verbose, debug, dry-run mode (i.e. nothing
\nactually happens.)

\n

Other Stuff

\n

Leopard and Snow Leopard

\n

These use a new utility called newsyslog. It is invoked every minute
\nby:

\n
/System/Library/LaunchDaemons/com.apple.newsyslog.plist\n
\n

The config file for this is /etc/newsyslog.conf and is kinda nicer
\nthan logrotate’s config :)

\n

Sources

\n\n\n\n
\n \n
\n \n \n \n \n \n\n", "id": "f5aaadd5-1ce8-52da-9eae-db03957462c8", "modified": "2026-01-13T18:47:28Z", "revisions": [ { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2026-01-13T18:47:28Z", "id": "2436477560f26e23d00a24add1cbfeafdca4af78", "shortId": "24364775", "subject": "No compression\n", "content": "This is a quick overview of `logrotate` which... umm... rotates log\nfiles. This was written for CentOS/RHEL 5.5.\n\nPertinent Files & Directories\n-----------------------------\n\n| File/Dir | Purpose |\n|-----------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------|\n| `/usr/sbin/logrotate` | The command itself. |\n| `/etc/cron.daily/logrotate` | Bash script that executes the `logrotate` command every day. |\n| `/etc/logrotate.conf` and `/etc/logrotate.d/` | Rotation defaults if they are not defined for specific daemons. You can add rotate configs to this file, or put them in `/etc/logrotate.d` |\n| `/var/lib/logrotate.status` | Show when the specified log files were last rotated. |\n\nLogrotate Options\n-----------------\n\nQuite simple, really. The `man` page elucidates all available options.\nHere's a quick table of what the most commonly used ones do.\n\n| Option | Purpose |\n|---------------------------------|------------------------------------------------------------------------------------------------------------------------------------|\n| `rotate ` | Keep specified number of logfiles before they are deleted and/or emailed to admin |\n| `size=` | Rotate logs when they reach this size. |\n| | This is done ''without regard'' for the last rotated time. |\n| | Use `minsize ` if you'd like to balance both time and size. |\n| | Bytes are used without a specifier. 100k, 100M are also fine. |\n| `daily` | Rotate daily. This is the default minimum granularity, unless you move `/etc/cron.daily/logrotate` to `/etc/cron.hourly/logrotate` |\n| `weekly` | Rotate weekly |\n| `monthly` | Rotate monthly |\n| `notifempty` | Don't rotate if empty (the reverse, `ifempty`, is default) |\n| `missingok` | If log file is missing for some reason, move on without error |\n| `compress` | Compress logfile after rotation. |\n| | Default is `gzip` with `-9` (maximum) compression. |\n| | The choice of compression program can be changed with `compresscmd` (e.g. `compresscmd bzip2`). |\n| | To pass options (like compression level), use `compressoptions`. |\n| | To change extension of compressed file, use `compressext` |\n| `dateext` | Use YYYYMMDD format instead of just tacking on numbers (like `.0`, `.1` and so on) to the rotated files. |\n| `mail ` | Email recipient the file that will be deleted after a rotation cycle |\n| `create ` | Create logfiles with the specified permissions and owner:group attributes. |\n| `olddir ` | Move all but the newest log file to this directory (nice to keep things organized) |\n\n### Other (kinda important) options\n\nYou'll see these used with Apache, for instance.\n\n| Option | Purpose |\n|-----------------|------------------------------------------------------------------------------------------------------------------------------|\n| `prerotate` | Execute the a script ''before'' rotating a log. Should end this with `endscript`. |\n| `postrotate` | Execute the a script ''after'' rotating a log. Should end this with `endscript`. |\n| `sharedscripts` | Make sure that the script(s) specified in `prerotate` and/or `postrotate` run just ''once'' (i.e. not for ''every'' logfile) |\n| `delaycompress` | Don't compress yesterday's logfile (if daily... you get the picture) |\n\nExample\n-------\n\nHere's a real-world application of the above. I want to rotate an\nalready huge log of OpenVPN connections (\\~32M in size) like so:\n\n* I want to maintain **60 days** worth of logs\n* Logfile **size doesn't matter** to me\n* The files should be rotated in **YYYYMMDD** format\n* They should be **compressed** (the default `gzip -9` is fine)\n* They should be **organized**; older logfiles should be **in a\n separate directory**\n\nThe logfile is at `/var/log/openvpn/connections.log`. Here's the\nconfiguration file I created for the above. It's `/etc/logrotate.d/openvpn`:\n\n /var/log/openvpn/connections.log { \n     daily \n     rotate 60 \n     dateext \n     compress \n     olddir /var/log/openvpn/old \n \n     nomail \n     missingok \n     notifempty \n     delaycompress \n     create 640 root root \n }\n\nTo test this, I run:\n\n logrotate -d /etc/logrotate.d/openvpn\n\nThe `-d` switch runs it in verbose, debug, dry-run mode (i.e. nothing\nactually happens.)\n\nOther Stuff\n-----------\n\n### Leopard and Snow Leopard\n\nThese use a new utility called `newsyslog`. It is invoked every minute\nby:\n\n /System/Library/LaunchDaemons/com.apple.newsyslog.plist\n\nThe config file for this is `/etc/newsyslog.conf` and is kinda nicer\nthan `logrotate`'s config :)\n\nSources\n-------\n\n- [Logrotate Examples](http://www.thegeekstuff.com/2010/07/logrotate-examples/)\n- [Using logrotate to manage log files](http://linuxers.org/howto/howto-use-logrotate-manage-log-files)\n- [Rotating Linux log files](http://www.ducea.com/2006/06/06/rotating-linux-log-files-part-2-logrotate/)\n" }, { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2015-12-27T07:27:56Z", "id": "1aa29105a45aa67523ffb61e73bcc415f935a47e", "shortId": "1aa29105", "subject": "Fix Markdown conversion\n\nSaw half a season of The Office\n", "content": "This is a quick overview of `logrotate` which... umm... rotates log\nfiles. This was written for CentOS/RHEL 5.5.\n\nPertinent Files & Directories\n-----------------------------\n\n| File/Dir | Purpose |\n|-----------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------|\n| `/usr/sbin/logrotate` | The command itself. |\n| `/etc/cron.daily/logrotate` | Bash script that executes the `logrotate` command every day. |\n| `/etc/logrotate.conf` and `/etc/logrotate.d/` | Rotation defaults if they are not defined for specific daemons. You can add rotate configs to this file, or put them in `/etc/logrotate.d` |\n| `/var/lib/logrotate.status` | Show when the specified log files were last rotated. |\n\nLogrotate Options\n-----------------\n\nQuite simple, really. The `man` page elucidates all available options.\nHere's a quick table of what the most commonly used ones do.\n\n| Option | Purpose |\n|---------------------------------|------------------------------------------------------------------------------------------------------------------------------------|\n| `rotate ` | Keep specified number of logfiles before they are deleted and/or emailed to admin |\n| `size=` | Rotate logs when they reach this size. |\n| | This is done ''without regard'' for the last rotated time. |\n| | Use `minsize ` if you'd like to balance both time and size. |\n| | Bytes are used without a specifier. 100k, 100M are also fine. |\n| `daily` | Rotate daily. This is the default minimum granularity, unless you move `/etc/cron.daily/logrotate` to `/etc/cron.hourly/logrotate` |\n| `weekly` | Rotate weekly |\n| `monthly` | Rotate monthly |\n| `notifempty` | Don't rotate if empty (the reverse, `ifempty`, is default) |\n| `missingok` | If log file is missing for some reason, move on without error |\n| `compress` | Compress logfile after rotation. |\n| | Default is `gzip` with `-9` (maximum) compression. |\n| | The choice of compression program can be changed with `compresscmd` (e.g. `compresscmd bzip2`). |\n| | To pass options (like compression level), use `compressoptions`. |\n| | To change extension of compressed file, use `compressext` |\n| `dateext` | Use YYYYMMDD format instead of just tacking on numbers (like `.0`, `.1` and so on) to the rotated files. |\n| `mail ` | Email recipient the file that will be deleted after a rotation cycle |\n| `create ` | Create logfiles with the specified permissions and owner:group attributes. |\n| `olddir ` | Move all but the newest log file to this directory (nice to keep things organized) |\n\n### Other (kinda important) options\n\nYou'll see these used with Apache, for instance.\n\n| Option | Purpose |\n|-----------------|------------------------------------------------------------------------------------------------------------------------------|\n| `prerotate` | Execute the a script ''before'' rotating a log. Should end this with `endscript`. |\n| `postrotate` | Execute the a script ''after'' rotating a log. Should end this with `endscript`. |\n| `sharedscripts` | Make sure that the script(s) specified in `prerotate` and/or `postrotate` run just ''once'' (i.e. not for ''every'' logfile) |\n| `delaycompress` | Don't compress yesterday's logfile (if daily... you get the picture) |\n\nExample\n-------\n\nHere's a real-world application of the above. I want to rotate an\nalready huge log of OpenVPN connections (\\~32M in size) like so:\n\n* I want to maintain **60 days** worth of logs\n* Logfile **size doesn't matter** to me\n* The files should be rotated in **YYYYMMDD** format\n* They should be **compressed** (the default `gzip -9` is fine)\n* They should be **organized**; older logfiles should be **in a\n separate directory**\n\nThe logfile is at `/var/log/openvpn/connections.log`. Here's the\nconfiguration file I created for the above. It's `/etc/logrotate.d/openvpn`:\n\n /var/log/openvpn/connections.log { \n     daily \n     rotate 60 \n     dateext \n     compress \n     olddir /var/log/openvpn/old \n \n     nomail \n     missingok \n     notifempty \n     delaycompress \n     create 640 root root \n }\n\nTo test this, I run:\n\n logrotate -d /etc/logrotate.d/openvpn\n\nThe `-d` switch runs it in verbose, debug, dry-run mode (i.e. nothing\nactually happens.)\n\nOther Stuff\n-----------\n\n### Leopard and Snow Leopard\n\nThese use a new utility called `newsyslog`. It is invoked every minute\nby:\n\n /System/Library/LaunchDaemons/com.apple.newsyslog.plist\n\nThe config file for this is `/etc/newsyslog.conf` and is kinda nicer\nthan `logrotate`'s config :)\n\nSources\n-------\n\n- [Logrotate Examples](http://www.thegeekstuff.com/2010/07/logrotate-examples/)\n- [Using logrotate to manage log files](http://linuxers.org/howto/howto-use-logrotate-manage-log-files)\n- [Rotating Linux log files](http://www.ducea.com/2006/06/06/rotating-linux-log-files-part-2-logrotate/)\n" }, { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2015-12-21T02:30:47Z", "id": "d658e80d1ecb97b196531c7b15a0f9af709c05de", "shortId": "d658e80d", "subject": "Incremental\n", "content": "This is a quick overview of `logrotate` which... umm... rotates log\nfiles. This is specific to CentOS/RHEL and was written for release 5.5.\n\nPertinent Files & Directories\n-----------------------------\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

File/Directory

Purpose |-------

/usr/sbin/logrotate

The command itself. |-------

/etc/cron.daily/logrotate

Bash script that executes the logrotate command every day. |-------

/etc/logrotate.conf and /etc/logrotate.d/

Rotation defaults if they are not defined for specific daemons. You can add rotate configs to this file, or put them in /etc/logrotate.d |-------

/var/lib/logrotate.status

Show when the specified log files were last rotated. |-------

\n\nLogrotate Options\n-----------------\n\nQuite simple, really. The `man` page elucidates all available options.\nHere's a quick table of what the most commonly used ones do.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Option

Purpose |-------

rotate <number>

Keep specified number of logfiles before they are deleted and/or emailed to admin |-------

size=<number>

Rotate logs when they reach this size.

\n
    \n
  • This is done without regard for the last rotated time.
    • \n
  • Use minsize <number> if you'd like to balance both time and size.
    • \n
  • Bytes are used without a specifier. 100k, 100M are also fine.
    • \n
\n

|-------

daily

Rotate daily. This is the default minimum granularity, unless you move /etc/'''cron.daily'''/logrotate to /etc/'''cron.hourly'''/logrotate |------

weekly

Rotate weekly |------

monthly

Rotate monthly |------

notifempty

Don't rotate if empty (the reverse, ifempty, is default) |------

missingok

If log file is missing for some reason, move on without error |------

compress

Compress logfile after rotation.

\n
    \n
  • Default is gzip with -9 (maximum) compression.
    • \n
  • The choice of compression program can be changed with compresscmd (e.g. compresscmd bzip2).
    • \n
  • To pass options (like compression level), use compressoptions.
    • \n
  • To change extension of compressed file, use compressext
    • \n
\n

|------

dateext

Use YYYYMMDD format instead of just tacking on numbers (like .0, .1 and so on) to the rotated files. |------

mail <recipient>

Email recipient the file that will be deleted after a rotation cycle |------

create <mode> <owner> <group>

Create logfiles with the specified permissions and owner:group attributes. |------

olddir <directory>

Move all but the newest log file to this directory (nice to keep things organized)

\n\n### Other (kinda important) options\n\nYou'll see these used with Apache, for instance.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Option

Purpose |-------

prerotate

Execute the a script before rotating a log. Should end this with endscript. |-------

postrotate

Execute the a script after rotating a log. Should end this with endscript. |-------

sharedscripts

Make sure that the script(s) specified in prerotate and/or postrotate run just once (i.e. not for every logfile) |------

delaycompress

Don't compress yesterday's logfile (if daily... you get the picture)

\n\nExample\n-------\n\nHere's a real-world application of the above. I want to rotate an\nalready huge log of OpenVPN connections (\\~32M in size) like so:\n\n- I want to maintain **60 days** worth of logs\n- Logfile **size doesn't matter** to me\n- The files should be rotated in **YYYYMMDD** format\n- They should be **compressed** (the default `gzip -9` is fine)\n- They should be **organized**; older logfiles should be **in a\n separate directory**\n\nThe logfile is at `/var/log/openvpn/connections.log`. Here's the\nconfiguration file I created for the above. It's\n`/etc/logrotate.d/openvpn`:\n\n` /var/log/openvpn/connections.log {` \n`     daily` \n`     rotate 60` \n`     dateext` \n`     compress` \n`     olddir /var/log/openvpn/old` \n` ` \n`     nomail` \n`     missingok` \n`     notifempty` \n`     delaycompress` \n`     create 640 root root` \n` }`\n\nTo test this, I run:\n\n` logrotate -d /etc/logrotate.d/openvpn`\n\nThe `-d` switch runs it in verbose, debug, dry-run mode (i.e. nothing\nactually happens.)\n\nOther Stuff\n-----------\n\n### Leopard and Snow Leopard\n\nThese use a new utility called `newsyslog`. It is invoked every minute\nby:\n\n` /System/Library/LaunchDaemons/com.apple.newsyslog.plist`\n\nThe config file for this is `/etc/newsyslog.conf` and is kinda nicer\nthan `logrotate`'s config :)\n\nSources\n-------\n\n- [Logrotate\n Examples](http://www.thegeekstuff.com/2010/07/logrotate-examples/)\n- [Using logrotate to manage log\n files](http://linuxers.org/howto/howto-use-logrotate-manage-log-files)\n- [Rotating Linux log\n files](http://www.ducea.com/2006/06/06/rotating-linux-log-files-part-2-logrotate/)\n" }, { "authorEmail": "mail@nikhil.io", "authorName": "Nikhil Anand", "date": "2015-12-20T19:56:47Z", "id": "359e4ba26f31c1a5e63c81b6fb1d0adeb4857aba", "shortId": "359e4ba2", "subject": "Logrotate Notes : First Draft\n", "content": "This is a quick overview of `logrotate` which... umm... rotates log\nfiles. This is specific to CentOS/RHEL and was written for release 5.5.\n\nPertinent Files & Directories\n-----------------------------\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

File/Directory

Purpose |-------

/usr/sbin/logrotate

The command itself. |-------

/etc/cron.daily/logrotate

Bash script that executes the logrotate command every day. |-------

/etc/logrotate.conf and /etc/logrotate.d/

Rotation defaults if they are not defined for specific daemons. You can add rotate configs to this file, or put them in /etc/logrotate.d |-------

/var/lib/logrotate.status

Show when the specified log files were last rotated. |-------

\n\nLogrotate Options\n-----------------\n\nQuite simple, really. The `man` page elucidates all available options.\nHere's a quick table of what the most commonly used ones do.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Option

Purpose |-------

rotate <number>

Keep specified number of logfiles before they are deleted and/or emailed to admin |-------

size=<number>

Rotate logs when they reach this size.

\n
    \n
  • This is done without regard for the last rotated time.
    • \n
  • Use minsize <number> if you'd like to balance both time and size.
    • \n
  • Bytes are used without a specifier. 100k, 100M are also fine.
    • \n
\n

|-------

daily

Rotate daily. This is the default minimum granularity, unless you move /etc/'''cron.daily'''/logrotate to /etc/'''cron.hourly'''/logrotate |------

weekly

Rotate weekly |------

monthly

Rotate monthly |------

notifempty

Don't rotate if empty (the reverse, ifempty, is default) |------

missingok

If log file is missing for some reason, move on without error |------

compress

Compress logfile after rotation.

\n
    \n
  • Default is gzip with -9 (maximum) compression.
    • \n
  • The choice of compression program can be changed with compresscmd (e.g. compresscmd bzip2).
    • \n
  • To pass options (like compression level), use compressoptions.
    • \n
  • To change extension of compressed file, use compressext
    • \n
\n

|------

dateext

Use YYYYMMDD format instead of just tacking on numbers (like .0, .1 and so on) to the rotated files. |------

mail <recipient>

Email recipient the file that will be deleted after a rotation cycle |------

create <mode> <owner> <group>

Create logfiles with the specified permissions and owner:group attributes. |------

olddir <directory>

Move all but the newest log file to this directory (nice to keep things organized)

\n\n### Other (kinda important) options\n\nYou'll see these used with Apache, for instance.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Option

Purpose |-------

prerotate

Execute the a script before rotating a log. Should end this with endscript. |-------

postrotate

Execute the a script after rotating a log. Should end this with endscript. |-------

sharedscripts

Make sure that the script(s) specified in prerotate and/or postrotate run just once (i.e. not for every logfile) |------

delaycompress

Don't compress yesterday's logfile (if daily... you get the picture)

\n\nExample\n-------\n\nHere's a real-world application of the above. I want to rotate an\nalready huge log of OpenVPN connections (\\~32M in size) like so:\n\n- I want to maintain **60 days** worth of logs\n- Logfile **size doesn't matter** to me\n- The files should be rotated in **YYYYMMDD** format\n- They should be **compressed** (the default `gzip -9` is fine)\n- They should be **organized**; older logfiles should be **in a\n separate directory**\n\nThe logfile is at `/var/log/openvpn/connections.log`. Here's the\nconfiguration file I created for the above. It's\n`/etc/logrotate.d/openvpn`:\n\n` /var/log/openvpn/connections.log {` \n`     daily` \n`     rotate 60` \n`     dateext` \n`     compress` \n`     olddir /var/log/openvpn/old` \n` ` \n`     nomail` \n`     missingok` \n`     notifempty` \n`     delaycompress` \n`     create 640 root root` \n` }`\n\nTo test this, I run:\n\n` logrotate -d /etc/logrotate.d/openvpn`\n\nThe `-d` switch runs it in verbose, debug, dry-run mode (i.e. nothing\nactually happens.)\n\nOther Stuff\n-----------\n\n### Leopard and Snow Leopard\n\nThese use a new utility called `newsyslog`. It is invoked every minute\nby:\n\n` /System/Library/LaunchDaemons/com.apple.newsyslog.plist`\n\nThe config file for this is `/etc/newsyslog.conf` and is kinda nicer\nthan `logrotate`'s config :)\n\nSources\n-------\n\n- [Logrotate\n Examples](http://www.thegeekstuff.com/2010/07/logrotate-examples/)\n- [Using logrotate to manage log\n files](http://linuxers.org/howto/howto-use-logrotate-manage-log-files)\n- [Rotating Linux log\n files](http://www.ducea.com/2006/06/06/rotating-linux-log-files-part-2-logrotate/)\n\n[Category:Nikhil's Notes](Category:Nikhil's_Notes \"wikilink\")\n[Category:From a past sysadmin\nlife](Category:From_a_past_sysadmin_life \"wikilink\")\n" } ], "sizeInBytes": 7693, "source": "This is a quick overview of `logrotate` which... umm... rotates log\nfiles. This was written for CentOS/RHEL 5.5.\n\nPertinent Files & Directories\n-----------------------------\n\n| File/Dir | Purpose |\n|-----------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------|\n| `/usr/sbin/logrotate` | The command itself. |\n| `/etc/cron.daily/logrotate` | Bash script that executes the `logrotate` command every day. |\n| `/etc/logrotate.conf` and `/etc/logrotate.d/` | Rotation defaults if they are not defined for specific daemons. You can add rotate configs to this file, or put them in `/etc/logrotate.d` |\n| `/var/lib/logrotate.status` | Show when the specified log files were last rotated. |\n\nLogrotate Options\n-----------------\n\nQuite simple, really. The `man` page elucidates all available options.\nHere's a quick table of what the most commonly used ones do.\n\n| Option | Purpose |\n|---------------------------------|------------------------------------------------------------------------------------------------------------------------------------|\n| `rotate ` | Keep specified number of logfiles before they are deleted and/or emailed to admin |\n| `size=` | Rotate logs when they reach this size. |\n| | This is done ''without regard'' for the last rotated time. |\n| | Use `minsize ` if you'd like to balance both time and size. |\n| | Bytes are used without a specifier. 100k, 100M are also fine. |\n| `daily` | Rotate daily. This is the default minimum granularity, unless you move `/etc/cron.daily/logrotate` to `/etc/cron.hourly/logrotate` |\n| `weekly` | Rotate weekly |\n| `monthly` | Rotate monthly |\n| `notifempty` | Don't rotate if empty (the reverse, `ifempty`, is default) |\n| `missingok` | If log file is missing for some reason, move on without error |\n| `compress` | Compress logfile after rotation. |\n| | Default is `gzip` with `-9` (maximum) compression. |\n| | The choice of compression program can be changed with `compresscmd` (e.g. `compresscmd bzip2`). |\n| | To pass options (like compression level), use `compressoptions`. |\n| | To change extension of compressed file, use `compressext` |\n| `dateext` | Use YYYYMMDD format instead of just tacking on numbers (like `.0`, `.1` and so on) to the rotated files. |\n| `mail ` | Email recipient the file that will be deleted after a rotation cycle |\n| `create ` | Create logfiles with the specified permissions and owner:group attributes. |\n| `olddir ` | Move all but the newest log file to this directory (nice to keep things organized) |\n\n### Other (kinda important) options\n\nYou'll see these used with Apache, for instance.\n\n| Option | Purpose |\n|-----------------|------------------------------------------------------------------------------------------------------------------------------|\n| `prerotate` | Execute the a script ''before'' rotating a log. Should end this with `endscript`. |\n| `postrotate` | Execute the a script ''after'' rotating a log. Should end this with `endscript`. |\n| `sharedscripts` | Make sure that the script(s) specified in `prerotate` and/or `postrotate` run just ''once'' (i.e. not for ''every'' logfile) |\n| `delaycompress` | Don't compress yesterday's logfile (if daily... you get the picture) |\n\nExample\n-------\n\nHere's a real-world application of the above. I want to rotate an\nalready huge log of OpenVPN connections (\\~32M in size) like so:\n\n* I want to maintain **60 days** worth of logs\n* Logfile **size doesn't matter** to me\n* The files should be rotated in **YYYYMMDD** format\n* They should be **compressed** (the default `gzip -9` is fine)\n* They should be **organized**; older logfiles should be **in a\n separate directory**\n\nThe logfile is at `/var/log/openvpn/connections.log`. Here's the\nconfiguration file I created for the above. It's `/etc/logrotate.d/openvpn`:\n\n /var/log/openvpn/connections.log { \n     daily \n     rotate 60 \n     dateext \n     compress \n     olddir /var/log/openvpn/old \n \n     nomail \n     missingok \n     notifempty \n     delaycompress \n     create 640 root root \n }\n\nTo test this, I run:\n\n logrotate -d /etc/logrotate.d/openvpn\n\nThe `-d` switch runs it in verbose, debug, dry-run mode (i.e. nothing\nactually happens.)\n\nOther Stuff\n-----------\n\n### Leopard and Snow Leopard\n\nThese use a new utility called `newsyslog`. It is invoked every minute\nby:\n\n /System/Library/LaunchDaemons/com.apple.newsyslog.plist\n\nThe config file for this is `/etc/newsyslog.conf` and is kinda nicer\nthan `logrotate`'s config :)\n\nSources\n-------\n\n- [Logrotate Examples](http://www.thegeekstuff.com/2010/07/logrotate-examples/)\n- [Using logrotate to manage log files](http://linuxers.org/howto/howto-use-logrotate-manage-log-files)\n- [Rotating Linux log files](http://www.ducea.com/2006/06/06/rotating-linux-log-files-part-2-logrotate/)\n", "title": "Logrotate Notes", "untracked": false, "uri": "/Logrotate_Notes", "relativePath": "Logrotate Notes.md" }