Forums before death by AOL, social media and spammers... "We can't have nice things"
|    comp.os.linux.misc    |    Linux-specific topics not covered by oth    |    135,536 messages    |
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
|    Message 134,854 of 135,536    |
|    Carlos E.R. to All    |
|    Re: ever had 1GB+ kern.log (and syslog)     |
|    16 Jan 26 22:23:08    |
   
   From: robin_listas@es.invalid   
      
   On 2026-01-16 22:03, Lawrence D’Oliveiro wrote:   
   > On Fri, 16 Jan 2026 21:40:30 +0100, Carlos E.R. wrote:   
   >   
   >> Way too complicated.   
   >   
   > First you said it couldn’t be done at all -- that it was   
   > “intentionally impossible”, and “intentionally not implemented by the   
   > journal”. Now when I point out it can be done quite easily,   
   > potentially with just a few lines of script, you claim that’s “way too   
   > complicated”.   
      
   It is way too complicated. I want tools provided by the systemd people, not   
   hacks.   
      
   Remember, I was simply commenting a feature that syslog has as default, and   
   systemd refuses to implement.   
      
   > What I think is, it’s your existing way of laboriously copying and   
   > filtering text-format logfiles with your own (likely regexp-heavy)   
   > custom scripting, that is “way too complicated”, and you are suffering   
   > from something called the “sunk-cost fallacy”, where you don’t want to   
   > throw away all the effort you have put into your existing ways of   
   > doing things, even if the new way is simpler.   
      
   I am using no scripting at all. I use the default toolset for handling syslog   
   messages for decades of *nix.   
      
   /etc/rsyslog.conf: (this configuration came with the system, commented out,   
   so I just had to uncoment it)   
      
   news.crit -/var/log/news/news.crit   
   news.err -/var/log/news/news.err   
   news.notice -/var/log/news/news.notice   
   news.debug -/var/log/news/news.debug   
      
      
   /etc/logrotate.d/syslog: (this configuration is the same as default for   
   other files)   
      
   /var/log/news/news.crit /var/log/news/news.err /var/log/news/news.notice {   
    compress   
    dateext   
    maxage 365   
    rotate 99   
    missingok   
    notifempty   
    size +4096k   
    su news news   
    create 640 news news   
    sharedscripts   
    postrotate   
    /usr/bin/systemctl reload syslog.service > /dev/null   
   # /etc/init.d/syslog reload > /dev/null   
    endscript   
   }   
      
      
   #CER news.debug is very verbose, not needed to keep long.   
   /var/log/news/news.debug {   
    compress   
    dateext   
    maxage 30   
    rotate 10   
    missingok   
    notifempty   
    size +4096k   
    su news news   
    create 640 news news   
    sharedscripts   
    postrotate   
    /usr/bin/systemctl reload syslog.service > /dev/null   
    endscript   
   }   
      
      
      
   --   
   Cheers, Carlos.   
   ES🇪🇸, EU🇪🇺;   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)   
|
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
(c) 1994, bbs@darkrealms.ca