Selectively changing how syslog files get rotated

[Brian Fahrlander]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Aldous Penaranda wrote:
> Hi list,
> 
> I'd like to retain selected syslog log files for a longer period. How do
> I accomplish this?

    Around here we keep two months of syslog data, in several machines
in the area. We don't do anything different, like send it all to a
central logging machine or anything, just make the change to logrotate.

    On Dapper, it's /etc/logrotate.conf.  Change "rotate 4" to "rotate
2" and then change "weekly" to "monthly".  Works great here.  Redhat
(FC4) is almost identical.

    THEN, when you have all this information, you can run Logwatch on
the entire data and you learn things. It also helps with PR to show at
least excerpts of this information to the client so he knows you're
paying attention to the system, and gives him a "warm fuzzy" which is
good for business.

- --
 ------------------------------------------------------------------------
 Brian Fahrländer                 Christian, Conservative, and Technomad
 Evansville, IN                              http://Fahrlander.net/brian
 ICQ: 5119262                         AOL/Yahoo/GoogleTalk: WheelDweller
 ------------------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD4DBQFFXYQU6PLtRzZbdhYRAq2JAJUfo7NZvfwV4sEj5jtQjHZrRUaoAJ0ZrDg+
chQFbg4OGPu0FfJzseBgag==
=MH9u
-----END PGP SIGNATURE-----