[rsyslog-notify] Forum Thread: Help with logs. Filling up and taking up space - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Fri May 15 18:10:16 CEST 2015


User: czech99 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25609#p25609

Message: 
----------
Hello everyone. Hoping someone can help.

I'm really bad/new to linux so bare with me. I managed to get rsyslog
installed on centos with loganalyzer. followed the directions and set it up
to forward all logs to sql.

However this morning i go and realize its not working. Turns out i ran out
of space. My messages and boot.log were both 24GB. I had to delete them and
restart for everything to resume working. 

we're logging cisco equipment. but it seems to be logging everything under
the sun.

My messages and boot.log always are identical in space too.

My questions are:
Is there any way to purge them daily? can i have them overwrite after a
certain size? 
Or not log at all and just go straight to the sql database?
How do i have it only log messages that says error and warning? I'd like to
ignore the severity "info" from being logged or being displayed in
loganalyzer. 

Sorry for the lengthy request. Hoping someone can assist

Here's a picture of my config and the size of the logs just after 1 hour.



[img:gp4isc1r]http://i61.tinypic.com/nc65i.png[/img:gp4isc1r]


[img:gp4isc1r]http://i60.tinypic.com/am4m4l.png[/img:gp4isc1r]


More information about the rsyslog-notify mailing list