logfile turned over due to size
-
@rcoleman-netgate
newsyslog[53683]: logfile turned over due to size>1019K
this appear on all my log, i have an script to copy out pfsense box at midnight, i use pfsense 2.5.2, the previous logfile has ~500kb and logged a few hours of the days, when i say a logfile refer all log files.... haproxy, authlog...
i rebooted the pfsense box and the logfile is more big now...
thanks -
Well, with 2.5.2 I would upgrade to 2.6-RELEASE and see if it is still doing it.
-
@rcoleman-netgate Is there any hack to insert some lines into the rotation script to copy the rotated log files out of the pfsense box? It is very important for me to copy the log files out. I have remote syslog configured but I also need the log files themselves.
-
You could use syslog-ng on the firewall itself to store logs locally in addition.
There were quite a few log fixes in 2.6: https://docs.netgate.com/pfsense/en/latest/releases/22-01_2-6-0.html#logging
You could probably pull the compressed log files from the firewall using a script running on some other box.
-
@stephenw10 this sounds good.
I will test upgrade carefully because recently i had this error https://forum.netgate.com/topic/170384/whatsapp-calls-do-not-connect-after-upgrade-2-5-2-2-6-0?_=1646414462611 with 2.6.0
thanks, you know if this bug are corrected too without system patch for captive portal? thanks again -
In 2.6 you need the patch but it's in the System Patches package. You just need to install that then apply the patch from the recommended patches list.
-
@stephenw10 hi! i made the update and apply the patch... but not get the desired result abut the logs... whats happen i modify the log chek cron job of the newsyslog? i thinking to schedule at midnight, set an reasonable logs size on logs setting gui config and run copy the logs before newsyslog check...i have sufficient disk space to store all day logs. but i'm not sure if it will work because clog
has sense?
thanks -
clog hasn't been used since 2.4.4p3 so that should not be an issue.
What is it about the log files you need that isn't exported by syslog?
-
@stephenw10
i can't explain sorry, my apologies because my english... i'm looking for some solution like traditional logrotate on linux box. at midnight copy before it rotate independent of remote syslog, -
So rotate logs on a schedule rather than a maximum size? And copy the log files out before doing that?
There's nothing built in to do that. You'd probably want to write your own newsyslog conf file and call it from cron.
