Project

General

Profile

Actions
Copy link

Enhancement #515

open

Orfeo: increase log retention

Added by Pierre-Louis Bonicoli over 8 years ago. Updated over 5 years ago.

Status:
In Progress
Priority:
Normal
Assignee:
Marc Dequènes
Category:
System :: Base
Start date:
2017-03-02
Due date:
% Done:

90%

Estimated time:
Patch Available:
Confirmed:
Yes
Branch:
Entity:
DuckCorp
Security:
Help Needed:

Description

Filesystem               Size  Used Avail Use% Mounted on
/dev/sdb7                2.7G  2.2G  588M  79% /var/log
The current log retention delays are:
  • 7 days
    • /var/log/syslog 223 Mo
  • 14 days
    • /var/log/apache2 11 Mo
  • 4 weeks
    • /var/log/mail.* 1.5 Go
    • /var/log/auth.log* 58 Mo
    • /var/log/user.log* 248 Ko
    • /var/log/daemon.log* 23 Mo
    • /var/log/fail2ban 5 Mo
  • 7 months
    • /var/log/vmail_clamdscan.log* 28 Ko
  • 1 year
    • /var/log/roundcube/ 1.6 Mo
  • Not using logrotate:
    • /var/log/named 204Mo
Propositions:
  • either rotate /var/log/mail.log everyday or compress /var/log/mail.log.1 (it would use ~120 Mo instead of 800 Mo)
  • /var/log/apache2: increase log retention to 2 months
  • compress /var/log/syslog.log.1
Actions
Copy link
 #1

Updated by Marc Dequènes over 8 years ago

Ok to increase Apache logs. It's not very costly for this host and if it helps debugging, it's fine.

All '.1' files could be compressed, on all hosts in fact.

Bind log is custom, but the directory was in the package IIRC, so that's strange there's no rules. Anyway we should add them.

We should probably investigate what we can do we journald, because it would maybe be easier to handle per-service retention.

Actions
Copy link
 #2

Updated by Marc Dequènes about 8 years ago

  • Category set to System :: Base
Actions
Copy link
 #3

Updated by Marc Dequènes over 5 years ago

  • Status changed from New to In Progress
  • Assignee set to Marc Dequènes
  • % Done changed from 0 to 90

I finally got to change the Apache retention. I did it for all hosts. To avoid having a host of files and since the size is reasonable, I switched to a weekly rotation. We would need to cleanup the old files now out of rotation at some point, thus keeping this ticket opened.

In the past I also removed mail.info generation in rsyslog since it does not bring anything interesting and mail.log is sufficient.

Currently logs are taking way less space:
  • syslog.1: 3.6MB on Orfeo, 6.1MB on Toushirou
  • mail.log.1: 22MB on Orfeo, 26MB on Toushirou
    So I guess there is no need for further actions at the moment.
Actions
Copy link

Also available in: Atom PDF