Reducing rsyslog redundancy [was: brainstorming for UDS-N - Performance - disk footprint]

[Steve Langasek]

On Wed, Jan 12, 2011 at 03:46:26PM -0600, Martin Pitt wrote:
> Steve Langasek [2010-11-02  9:56 -0700]:
> > Does this proposal include keeping /var/log/auth.log separate?  There are
> > several logs that are currently written to disk synchronously that lose this
> > characteristic if we do "one big logfile"; namely, /var/log/auth.log,
> > /var/log/mail.err, and /var/log/news/news.{crit,err}, each of which we have
> > a good reason to want to be recorded in the event of a system crash.

> I totally agree, and I didn't intend to remove these sensitive ones.

> I'd prefer keeping the "catch-all" /var/log/syslog and drop the
> duplicated more special ones, as things like d-i and logcheck depend
> on this, but not the others:

>   http://bazaar.launchpad.net/~ubuntu-branches/ubuntu/natty/rsyslog/natty/revision/35

> Please yell if you have any objections.

Well, as I wrote in
https://lists.ubuntu.com/archives/ubuntu-devel/2010-November/031905.html I
don't agree with this way of doing it, but that's a matter of opinion and
why it's a configuration file. :)  This is certainly a significant
improvement over what was there previously, thanks!

Should there be a corresponding change to the default logrotate policy, to
avoid creating 0-byte log files that mislead the admin?

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 828 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-devel/attachments/20110112/3920661f/attachment.pgp>