Log rotation and per-log size limit or rotation settings?
-
I was trying to look into my /var/log/filter.log to find out who was hitting a specific port on my router only to find that I only had about 1 days worth of history on it.
I was just reading through HEADS UP: Logging changes: clog deprecated, plain text logs + newsyslog rotation in next snapshots, which I think is an excellent feature and I can't wait for it.
However, the log rotation won't be available until 2.5.0. I am currently on 2.4.5-RELEASE-p1.
Now, the filter log tends to be much more busy than some of the other logs. I would love to be able to specify a size limit per-log. I wouldn't mind a larger filter.log, but other logs (like gateways.log or ntpd.log) can store months of history in the 500kb limit.
While I don't know that it is worth investing in this for the 2.4.x tree, would it be possible to allow us to have greater flexibility with the new log rotation features? For instance, being able to say that I want more archived versions of high volume logs, but maybe only 1 of the low volume logs. So filter.log I might configure to allow 10+ archived logs, whereas gateways.log or ntpd.log I might only allow 1 archived log.
Do I have any other options until 2.5.0 is available other than increasing the limit of all my logs?
-
So I should probably "RTFM", in the Log Settings page of the documentation it clarified that I can click the wrench icon from the Firewall log page to set a per-log setting. I just used this to bump the log limit, will see how that helps. Still, having native log rotation and per-log rotation settings will be helpful.
-
A lot of that is changing in 2.5 anyway:
https://docs.netgate.com/pfsense/en/latest/releases/2-5-0.html#loggingSteve
-
@stephenw10 said in Log rotation and per-log size limit or rotation settings?:
A lot of that is changing in 2.5 anyway:
https://docs.netgate.com/pfsense/en/latest/releases/2-5-0.html#loggingSteve
Yeah, saw that and referenced it in the first post with the link to the announcement about these changes coming. What is the current timeline for the 2.5 release?
-
Still 'when it's ready'
You can follow the open issues here though: https://redmine.pfsense.org/projects/pfsense/issues?query_id=106
Steve
