> After the logrotate command, I can still send messages to syslog with
>
> $ logger -i testing
>
> Note that the -i is necessary to make each subsequent syslog entry different,
> because /etc/rsyslogd.conf has
>
> $RepeatedMsgReduction on
>
> by default. Thus if you're testing with just `logger testing` these messages
> will get suppressed. I just want to be sure that this isn't tricking you into
> thinking that syslog is broken.
On 09/07/2011 02:16 PM, Barry Warsaw wrote:
>> [0] spitzer:~# logger testing
>> [0] spitzer:~# tail -2 /var/log/syslog
>> 10:08:48 beta AptDaemon: INFO: Shutdown was requested
>> Sep 7 10:09:42 spitzer root: testing
>> [0] spitzer:~# logrotate --force --verbose /etc/logrotate.conf
> [output deleted]
>> [0] spitzer:~# logger testing
>> [0] spitzer:~# tail /var/log/syslog
>> [0] spitzer:~# tail -2 /var/log/syslog.1
>> Sep 7 10:08:48 beta AptDaemon: INFO: Shutdown was requested
>> Sep 7 10:09:42 spitzer root: testing
>>
>>
>> ==> no more messages in syslog.
>
> At this point, what is the ownership and permissions on /var/log/syslog?
# ls -l /var/log/syslog
-rw-rw-r-- 1 root adm 0 2011-09-07 10:11 /var/log/syslog
> After the logrotate command, I can still send messages to syslog with uction on
>
> $ logger -i testing
>
> Note that the -i is necessary to make each subsequent syslog entry different,
> because /etc/rsyslogd.conf has
>
> $RepeatedMsgRed
>
> by default. Thus if you're testing with just `logger testing` these messages
> will get suppressed. I just want to be sure that this isn't tricking you into
> thinking that syslog is broken.
I don't think so:
[0] spitzer:~# logger a new, improved testing message
[0] spitzer:~# tail /var/log/syslog
[0] spitzer:~#
> I also testing this with a very minimal logrotate.conf file:
>
> -----snip snip-----
> weekly
> rotate 4
> create
>
> /var/log/syslog
> {
> postrotate
> reload rsyslog >/dev/null 2>&1 || true
> endscript
> sharedscripts
> }
> -----snip snip-----
I've attached my logrotate.conf in case it matters.
>
> I still can't reproduce your problem. :(
Well, let me know if there's anything I can do to help...
[0] spitzer:~# dpkg-query -l rsyslog Unknown/ Install/ Remove/ Purge/Hold Not/Inst/ Cfg-files/ Unpacked/ Failed- cfg/Half- inst/trig- aWait/Trig- pend /Reinst- required (Status,Err: uppercase=bad) ======= ======= ===-=== ======= ======= ===-=== ======= ======= ======= ======= ======= ======= ======= ====
Desired=
|
Status=
|/ Err?=(none)
||/ Name Version Description
+++-===
ii rsyslog 4.2.0-2ubuntu8.1 enhanced multi-threaded
syslogd
Best,
-Nikolaus
--
»Time flies like an arrow, fruit flies like a Banana.«
PGP fingerprint: 5B93 61F8 4EA2 E279 ABF6 02CF A9AD B7F8 AE4E 425C