Public bug reported:

Cannot collect rotated syslog.1 or syslog.2.gz by sosreport. If syslog
is rotated daily, syslog only contains logs in less than 24 hours.

I expect sosreport collects syslog and syslog.1 to see logs at least for
24 hours. Or it would be nice if sosreport has options to switch to
collect old logs or not.

====
$ sudo logrotate -f /etc/logrotate.conf
$ ls -alF /var/log/syslog*
-rw-r----- 1 syslog adm  1984 Aug 13 16:12 /var/log/syslog
-rw-r----- 1 syslog adm 30816 Aug 13 16:11 /var/log/syslog.1
-rw-r----- 1 syslog adm  1332 Aug 13 15:55 /var/log/syslog.2.gz
-rw-r----- 1 syslog adm  6095 Aug 13 15:43 /var/log/syslog.3.gz

$ sudo sosreport -a -l | grep logs
 logs                 Basic system information for Debian based distributions
 logs                 Basic system information for Ubuntu based distributions
 apache.log                on              gathers all apache logs
 auditd.logsize            15              maximum size (MiB) of logs to collect
 logs.logsize              15              max size (MiB) to collect per syslog 
file
 logs.all_logs             on              collect all log files defined in 
syslog.conf
 logs.logsize              15              max size (MiB) to collect per syslog 
file
 logs.all_logs             on              collect all log files defined in 
syslog.conf
 nscd.nscdlogsize          50              max size (MiB) to collect per nscd 
log file
 openstack-cinder.log      on              gathers openstack cinder logs
 openstack-glance.log      on              gathers openstack-glance logs
 openstack-keystone.log    on              gathers openstack keystone logs
 openstack-swift.log       on              gathers openstack-swift logs

$ sudo sosreport -a --batch
$ sudo tar tf /tmp/sosreport-nobuto-local-machine-1-20140813161158.tar.xz | 
grep syslog
sosreport-nobuto-local-machine-1-20140813161158/var/log/juju/rsyslog-cert.pem
sosreport-nobuto-local-machine-1-20140813161158/var/log/juju/rsyslog-key.pem
sosreport-nobuto-local-machine-1-20140813161158/var/log/syslog
sosreport-nobuto-local-machine-1-20140813161158/etc/logrotate.d/rsyslog
sosreport-nobuto-local-machine-1-20140813161158/etc/rsyslog.conf
sosreport-nobuto-local-machine-1-20140813161158/etc/default/rsyslog
sosreport-nobuto-local-machine-1-20140813161158/etc/init/rsyslog.conf

^ syslog.1 is not collected.

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: sosreport 3.1-1ubuntu2
ProcVersionSignature: User Name 3.16.0-6.11-generic 3.16.0-rc7
Uname: Linux 3.16.0-6-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.2
Architecture: amd64
Date: Wed Aug 13 15:52:09 2014
Dependencies: python3-six 1.5.2-1
ProcEnviron:
 TERM=xterm
 PATH=(custom, no user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: sosreport
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: sosreport (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug trusty uec-images

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1356211

Title:
  cannot collect rotated syslog.1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sosreport/+bug/1356211/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to