This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
build:logging [2005/07/30 15:08] 206.197.251.61 |
build:logging [2018/05/28 02:10] (current) SLUUG Administration [logrotate.conf] |
||
|---|---|---|---|
| Line 12: | Line 12: | ||
| - | + | ==== /etc/klogd/default ==== | |
| - | ==== /etc/init.d/klogd ==== | + | |
| Change KLOGD line to read: | Change KLOGD line to read: | ||
| - | KLOGD="-c 5" | + | <file> |
| + | KLOGD="-c 5" | ||
| + | </file> | ||
| to turn off console messages for lower priority messages. | to turn off console messages for lower priority messages. | ||
| + | Technically, we should be changing the ''kernel.printk'' line in ''/etc/sysctl.conf'' instead, but that has not yet been tested. | ||
| + | |||
| + | |||
| + | ==== logrotate.conf ==== | ||
| + | |||
| + | Edit ''/etc/logrotate.conf'' to change the ''rotate'' option for ''/var/log/wtmp'' from ''1'' to ''25'', and ''/var/log/btmp'' from ''1'' to ''13''. | ||
| + | |||
| + | === Later changes and corrections === | ||
| + | |||
| + | Add option ''dateext'' to change the naming convention of adding | ||
| + | generation numbers ".1", ".2", etc. to the "-yyyymmdd" format. | ||
| + | Also manually rename all existing log files to the new format. | ||
| + | Note this is the default in later releases. | ||
| + | |||
| + | Fix incorrect permissions for the ''/var/log/btmp'' entry | ||
| + | from ''0660'' to ''0600''. | ||
| + | Also chmod existing files to make the same change. | ||
| + | This is a well known bug fixed in later releases, but should be verified. | ||
| ==== syslog.conf ==== | ==== syslog.conf ==== | ||
| + | Everything at level of info other than kern.info and mail.info goes to /var/log/messages. That was accomplished with: | ||
| + | |||
| + | news.info;daemon.info;\ | ||
| + | auth.info;authpriv.info;\ | ||
| + | cron.info;syslog.info;\ | ||
| + | user.info -/var/log/messages | ||
| + | |||
| + | |||
| + | OLD: | ||
| # /etc/syslog.conf Configuration file for syslogd. | # /etc/syslog.conf Configuration file for syslogd. | ||
| # | # | ||
| Line 91: | Line 119: | ||
| *.=debug;*.=info;\ | *.=debug;*.=info;\ | ||
| *.=notice;*.=warn |/dev/xconsole | *.=notice;*.=warn |/dev/xconsole | ||
| - | |||
| ===== Reporting ===== | ===== Reporting ===== | ||
| - | ===== System Changes ===== | ||
| - | //Please post changes here in the format of: [H4] date|your name [/H4] [CR]description of chages made// | ||
| - | |||
| - | === Feburary 19 2005 | Install Group === | ||
| - | Initial instalation of default Debian logging. | ||
| ===== TODO ===== | ===== TODO ===== | ||
| Line 110: | Line 132: | ||
| * Enable tripwire | * Enable tripwire | ||
| * Determine what admins are to recieve daily log reports | * Determine what admins are to recieve daily log reports | ||
| - | |||
| ===== Credits ===== | ===== Credits ===== | ||
| + | |||