Date:  Thu, 10 Apr 2008 06:30:51 -0700 (PDT)
From:  Dan Kriwitsky <webhosting (at mark) yahoo.com>
Subject:  [coba-e:12531] logrotate
To:  coba-e (at mark) bluequartz.org
Message-Id:  <637022.25041.qm (at mark) web65614.mail.ac4.yahoo.com>
X-Mail-Count: 12531

Any ideas as to what log file is being parsed every day and not rotated
out? Every day I am getting the identical 1227 line email from the server I
am setting up so it appears whatever log file it is, is not being zeroed
out. 

Warning: Truncating oversized request field
Warning: Truncating oversized date field
Skipping bad record (9113)
Warning: Truncating oversized referrer field
Warning: Truncating oversized referrer field
Warning: Truncating oversized referrer field

etc. for 1227 lines.

I'd like to simply rm that log file and 'touch file_log' to replace it with
a new file. Or, is the log not being removed because it hasn't reached a
certain size? I notice the last .gz for the error_log is April 6, so it
hasn't been removed. Even thought it's larger than the access_log that is
being zeroed out on a daily basis.
-rw-r--r--  1 root   root 93537 Apr 10 04:02 error_log

logrotate.conf says:

# rotate log files weekly
weekly

# keep 10 weeks worth of backlogs
rotate 10

# create new (empty) log files after rotating old ones
create

I'm not sure why it says weekly if the file is in /etc/cron.daily
-- 
Dan Kriwitsky

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com