On Saturday 09 October 2004 01:29 pm, mike wrote:
> Chris wrote:
> > I've setup logrotate to rotate my /var/log/snort/session.log daily and
> > mail it to me. For some reason its being rotated but not but the old
> > log isn't being mailed, however, I have the same setup for rkhunter
> > that sends me the output of rkhunter after its run as a cron job and
> > before its compressed. Below are my settings:
> >
> > # system-specific logs may be configured here
> > /var/log/rkhunter.log {
> > daily
> > rotate 5
> > nocreate
> > maillast
> > mail [EMAIL PROTECTED]
> > }
> >
> > /var/log/snort/session.log {
> > daily
> > rotate 5
> > nocreate
> > maillast
> > mail [EMAIL PROTECTED]
> > }
> >
> > Any ideas?
>
> How long have you been running the snort/session.log rotate
> if rotated 5 times, once daily would take 6 days i think till last
> log to expire and be mailed? Just a guess.
>
> Mike
A couple of days now, however, what confuses me is that the raw rkhunter log
output was mailed to me the first time the log was rotated. Since its
already gone through 5 rotations I'm getting the compressed log mailed to
me now, which I really don't want. I've changed the "rotate 5" to "rotate
1" on the snort log and will see what happens.
--
Chris
Registered Linux User 283774 http://counter.li.org
3:34pm up 5 days, 23:26, 1 user, load average: 0.15, 0.11, 0.04
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Remembering is for those who have forgotten.
-- Chinese proverb
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Live - From Virgin Radio UK David Bowie - Changes
____________________________________________________
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________
