{"id":205,"date":"2019-01-03T23:26:53","date_gmt":"2019-01-03T22:26:53","guid":{"rendered":"http:\/\/linuxboxen2.dk\/?p=205"},"modified":"2019-01-03T23:26:53","modified_gmt":"2019-01-03T22:26:53","slug":"rotere-log-filer","status":"publish","type":"post","link":"https:\/\/www.linuxboxen.dk\/?p=205","title":{"rendered":"Rotere log filer."},"content":{"rendered":"\n<h2 class=\"wp-block-heading\"><strong>Log fil styring.<\/strong><\/h2>\n\n\n\n<p>Log rotation p\u00e5 Linux systemer er mere kompliceret, end du m\u00e5ske tror. Hvilke logfiler roteres, hvorn\u00e5r og hvor ofte, hvorvidt de roterede log filer skal komprimeres, og hvor mange forekomster af log filerne der bevares alt afh\u00e6nger af indstillinger i konfigurationsfilerne.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Hvad er log rotation ?.<\/strong><\/h2>\n\n\n\n<p>Logrotation er den proces, der omd\u00f8ber en aktuel logfil (for eksempel auth.log bliver auth.log.1) og opretter en ny logfil (f.eks. Auth.log) for nye log poster. Afh\u00e6ngigt af antallet af filer, der skal bevares, kan vi muligvis se noget som logfil.6, der bliver logfil.7 (med den gamle logfil.7 forsvinder) og logfil.5 bliver logfil.6 osv., F\u00f8r den nye log fil oprettes. De \u00e6ldre log filer kan ogs\u00e5 komprimeres, is\u00e6r hvis de har tendens til at v\u00e6re meget store filer. S\u00e5, du kan se logfile.1.gz i stedet for logfile.1<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Hvordan virker det ?<\/strong><\/h2>\n\n\n\n<p>Logrotat v\u00e6rkt\u00f8jet bruges almindeligt til at styre processen med log rotation, selvom log rotationen selv k\u00f8res gennem cron.<br \/><br \/>De vigtige filer at v\u00e6re opm\u00e6rksomme p\u00e5 er:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u00a0\u00a0\u00a0\u00a0 \/usr\/sbin\/logrotate &#8211; logrotate kommandoen selv (den eksekverbare)<\/li>\n<li>\u00a0\u00a0\u00a0\u00a0 \/etc\/cron.daily\/logrotate &#8211; shell scriptet, der k\u00f8rer logrotat dagligt<br \/>\u00a0\u00a0\u00a0\u00a0 (bem\u00e6rk at det kan v\u00e6re \/etc\/cron.daily\/logrotate.cron p\u00e5 nogle systemer)<\/li>\n<li>\u00a0\u00a0\u00a0\u00a0 \/etc\/logrotate.conf &#8211; logrotations konfigurationsfilen<\/li>\n<li>\u00a0 \u00a0 \/etc\/logrotate.d &#8211; konfigurationsfiler til andre logs s\u00e5 som nginx og rsyslog og andre.<\/li>\n<\/ul>\n\n\n\n<p><br \/>En anden vigtig ting at huske er at \/etc\/logrotate.d, inkluderet i processen gennem denne linje i filen \/etc\/logrotate.conf:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">include \/etc\/logrotate.d<\/pre>\n\n\n\n<p>Du kan i mine eksempler se hvilken fil navne som bruges eks den f\u00f8rste er \/var\/log\/syslog som er syslog filen og fil navnet er syslog filen i root dir \/var\/log\/ og osv osv.<\/p>\n\n\n\n<p>Det er ogs\u00e5 vigtigt at huske at hvis du \u00e6ndre i filen skal du reload config igen med en rsyslog reload som vist her.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">$ sudo service rsyslog force-reload<\/pre>\n\n\n\n<p>Og s\u00e5 kan man check om det virkede som det skal med en status som vist her.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">$ sudo service rsyslog status\n\n rsyslog.service - System Logging Service\n   Loaded: loaded (\/lib\/systemd\/system\/rsyslog.service; enabled; vendor preset: enabled)\n   <strong>Active: active (running) since Tue 2019-01-01 22:16:25 CET; 9s ago<\/strong>\n     Docs: man:rsyslogd(8)\n           http:\/\/www.rsyslog.com\/doc\/\n Main PID: 26448 (rsyslogd)\n    Tasks: 4 (limit: 4915)\n   CGroup: \/system.slice\/rsyslog.service\n           \u2514\u250026448 \/usr\/sbin\/rsyslogd -n\n\nJan 01 22:16:25 work01 systemd[1]: Starting System Logging Service...\nJan 01 22:16:25 work01 rsyslogd[26448]: imuxsock: Acquired UNIX socket '\/run\/systemd\/journal\/syslog' (fd 3) from systemd.  [v8.32.0]\nJan 01 22:16:25 work01 rsyslogd[26448]: rsyslogd's groupid changed to 106\nJan 01 22:16:25 work01 systemd[1]: Started System Logging Service.\nJan 01 22:16:25 work01 rsyslogd[26448]: rsyslogd's userid changed to 102\nJan 01 22:16:25 work01 rsyslogd[26448]:  [origin software=\"rsyslogd\" swVersion=\"8.32.0\" x-pid=\"26448\" x-info=\"http:\/\/www.rsyslog.com\"]\n\n<\/pre>\n\n\n\n<p>Du kan se at p\u00e5 linjen som vist med fed. at config er loaded for 9 sekunder siden, da jeg tastede kommanden ind. S\u00e5 hvis der er \u00e6ndriger i config filen bliver de brugt nu.<\/p>\n\n\n\n<p>Hvis du bare vil have den skal rotatere log filern bruger du rotate som vist her.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">$ sudo service rsyslog rotate\n * Closing open files rsyslogd                                                                                                   [ OK ]\n<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Parameterne i config filen betyder.<\/strong><\/h2>\n\n\n\n<p><strong>rotate<\/strong> 7 betyder den skal rotate hver \u00a07 log fil. Og hvis der st\u00e5r daily s\u00e5 bliver der oprettet ebn ny log hver dag.<\/p>\n\n\n\n<p><strong>missingok<\/strong> betyder at det er ok filen ikke findes.<\/p>\n\n\n\n<p><strong>rotate<\/strong> beskriver for mange log filer som skal gemmes.<\/p>\n\n\n\n<p><strong>compress<\/strong> skal filerne pakkes.<\/p>\n\n\n\n<p><strong>notifempty<\/strong> rotere ikke tomme filer.<\/p>\n\n\n\n<p><strong>create 640 root adm<\/strong> Opret nye logfiler med s\u00e6t tilladelser\/ejer\/gruppe parametere<\/p>\n\n\n\n<p><strong>size<\/strong> beskriver max fil st\u00f8res hvorefter log filen bliver rotateret.<\/p>\n\n\n\n<p><strong>delaycompress<\/strong> beskriver at den akrive log fil ikke skal pakkes.<\/p>\n\n\n\n<p>Der er flere parametere som jeg ikke vil komme ind p\u00e5 her.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Eksemple p\u00e5 config fil.<\/strong><\/h2>\n\n\n\n<p>\/etc\/logrotate.d\/rsyslog<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">\/var\/log\/syslog\n{\n        rotate 7\n        daily\n        missingok\n        notifempty\n        delaycompress\n        compress\n        postrotate\n                invoke-rc.d rsyslog rotate &gt; \/dev\/null\n        endscript\n}\n\n\/var\/log\/mail.info\n\/var\/log\/mail.warn\n\/var\/log\/mail.err\n\/var\/log\/mail.log\n\/var\/log\/daemon.log\n\/var\/log\/kern.log\n\/var\/log\/auth.log\n\/var\/log\/user.log\n\/var\/log\/lpr.log\n\/var\/log\/cron.log\n\/var\/log\/debug\n\/var\/log\/messages\n{\n        rotate 7\n        weekly\n        missingok\n        notifempty\n        compress\n        delaycompress\n        sharedscripts\n        postrotate\n                invoke-rc.d rsyslog rotate &gt; \/dev\/null\n        endscript\n}\n<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Log fil styring. Log rotation p\u00e5 Linux systemer er mere kompliceret, end du m\u00e5ske tror. Hvilke logfiler roteres, hvorn\u00e5r og hvor ofte, hvorvidt de roterede log filer skal komprimeres, og hvor mange forekomster af log filerne der bevares alt afh\u00e6nger af indstillinger i konfigurationsfilerne. Hvad er log rotation ?. Logrotation er den proces, der omd\u00f8ber [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_sitemap_exclude":false,"_sitemap_priority":"","_sitemap_frequency":"","footnotes":""},"categories":[2],"tags":[],"class_list":["post-205","post","type-post","status-publish","format-standard","hentry","category-tips"],"a3_pvc":{"activated":false,"total_views":0,"today_views":0},"_links":{"self":[{"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=\/wp\/v2\/posts\/205","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=205"}],"version-history":[{"count":0,"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=\/wp\/v2\/posts\/205\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.linuxboxen.dk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}