home bbs files messages ]

Forums before death by AOL, social media and spammers... "We can't have nice things"

   comp.os.linux.misc      Linux-specific topics not covered by oth      135,536 messages   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]

   Message 134,881 of 135,536   
   Carlos E.R. to Nuno Silva   
   Re: ever had 1GB+ kern.log (and syslog)    
   17 Jan 26 14:33:32   
   
   From: robin_listas@es.invalid   
      
   On 2026-01-17 00:33, Nuno Silva wrote:   
   > On 2026-01-16, Lawrence D’Oliveiro wrote:   
   >   
   >> On Fri, 16 Jan 2026 22:23:08 +0100, Carlos E.R. wrote:   
   >>   
   >>> I am using no scripting at all. I use the default toolset for   
   >>> handling syslog messages for decades of *nix.   
   >>>   
   >>> /etc/rsyslog.conf: (this configuration came with the system,   
   >>> commented out, so I just had to uncoment it)   
   >>>   
   >>> news.crit                               -/var/log/news/news.crit   
   >>> news.err                                -/var/log/news/news.err   
   >>> news.notice                             -/var/log/news/news.notice   
   >>> news.debug                              -/var/log/news/news.debug   
   >>   
   >> This involves splitting out the messages into categories upfront, at   
   >> collection time, not analysis time.   
   >>   
   >>> /etc/logrotate.d/syslog: (this configuration is the same as default   
   >>> for other files)   
   >>>   
   >>> [etc]   
   >>   
   >> Same applies here.   
   >>   
   >>> I want tools provided by the systemd people, not hacks.   
   >>   
   >> Most data-collection philosophy is “collect everything first, split it   
   >> out for analysis later”. That seems to me more flexible than having to   
   >> decide up front how you want to divide up the raw data for analysis.   
   >> Because what happens if you change your mind about how you want to   
   >> analyze data you’ve already collected?   
   >>   
   >> And it’s how the systemd tools work.   
   >   
   > If you change your mind later, you do with the files the same thing   
   > you're suggesting Carlos do with systemd: write something to undo the   
   > splitting.   
      
   If you want the total messages, I have /var/log/allmessages, with a fast   
   rotation.   
      
   syslog daemons are very versatile, after decades of usage.   
      
   --   
   Cheers, Carlos.   
   ES🇪🇸, EU🇪🇺;   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]


(c) 1994,  bbs@darkrealms.ca