Selectively changing how syslog files get rotated

Brian Fahrlander brian at
Fri Nov 17 09:42:44 UTC 2006

Hash: SHA1

Aldous Penaranda wrote:
> Hi list,
> I'd like to retain selected syslog log files for a longer period. How do
> I accomplish this?

    Around here we keep two months of syslog data, in several machines
in the area. We don't do anything different, like send it all to a
central logging machine or anything, just make the change to logrotate.

    On Dapper, it's /etc/logrotate.conf.  Change "rotate 4" to "rotate
2" and then change "weekly" to "monthly".  Works great here.  Redhat
(FC4) is almost identical.

    THEN, when you have all this information, you can run Logwatch on
the entire data and you learn things. It also helps with PR to show at
least excerpts of this information to the client so he knows you're
paying attention to the system, and gives him a "warm fuzzy" which is
good for business.

- --
 Brian Fahrländer                 Christian, Conservative, and Technomad
 Evansville, IN                    
 ICQ: 5119262                         AOL/Yahoo/GoogleTalk: WheelDweller
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla -


More information about the ubuntu-users mailing list