[rsyslog-notify] Forum Thread: Re: RainerScript filters and output channels - (Mode 'reply')

noreply at adiscon.com noreply at adiscon.com
Mon Sep 15 09:28:24 CEST 2014


User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24926#p24926

Message: 
----------
Just a note that you are probably better off using logrotate (or similar
tool) rather than output channels

using output channels, you will only rotate a log file when a new log comes
in, and each log file will rotate independently of all the others. While
this is good for keeping the size of an individual file down, modern
filesystems systems really don't run into grief until files get _really_
large (10s to 100s of GB, not the 10MB size you are rotating at here), and
most of the time you want to group files together by time (all the xxxx and
yyyy logs for 3 weeks ago), not based on how much data was written to them
(where the xxxx log may have 1 day of data and the yyyy log may have 1 year
of data available)


More information about the rsyslog-notify mailing list