CentOS - Nov 2009 - CentOS 5.4 logrotate and syslog

Anyone having problems with logrotate and CentOS 5.4?

Although I have /etc/logrotate.d/mail (contents below) to rotate my maillog
file, it fails to do it automatically:


/var/log/maillog {
    compress
    dateext
    maxage 365
    rotate 60
    size=+1024k
    missingok
    postrotate
     /etc/init.d/MailScanner restart
    endscript
}
++++++++++++++++++++++++++++


logrotate.conf:
++++++++++++++++++++++++++++++++++++++++++++++++++++
# see "man logrotate" for details
# rotate log files weekly
#weekly
daily

# keep 4 weeks worth of backlogs
rotate 5

# create new (empty) log files after rotating old ones
create

# uncomment this if you want your log files compressed
compress

# RPM packages drop log rotation information into this directory
include /etc/logrotate.d

# no packages own wtmp -- we'll rotate them here
#/var/log/wtmp {
#    monthly
#    minsize 1M
#    create 0664 root utmp
#    rotate 1
#}

# system-specific logs may be also be configured here.
++++++++++++++++++++++++++++++++++++++++++++++++++++

The file rotates correctly if I manually force it, however my logs won't
update until I restart syslogd.  In other words, the new /var/log/maillog
isn't created after the logrotate.  I have to manually restart syslogd and
manually touch /var/log/maillog.


I've made no changes to syslog.conf:

/etc/syslog.conf:
++++++++++++++++++++++++++++++++++++++++++++++++++++
# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.*                                                 /dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none                /var/log/messages

# The authpriv file has restricted access.
authpriv.*                                              /var/log/secure

# Log all the mail messages in one place.
mail.*                                                  -/var/log/maillog


# Log cron stuff
cron.*                                                  /var/log/cron

# Everybody gets emergency messages
*.emerg                                                 *

# Save news errors of level crit and higher in a special file.
uucp,news.crit                                          /var/log/spooler

# Save boot messages also to boot.log
local7.*
++++++++++++++++++++++++++++++++++++++++++++++++++++


Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.centos.org/pipermail/centos/attachments/20091109/b3cd6ec4/attachment-0003.html>

Ryan Ivey wrote on Mon, 9 Nov 2009 12:47:01 -0500:
> The file rotates correctly if I manually force it, however my logs
won't
> update until I restart syslogd.  In other words, the new /var/log/maillog
> isn't created after the logrotate.  I have to manually restart syslogd
and
> manually touch /var/log/maillog.
Look in the syslog file for logrotate where the original content for your 
"recipe" is. There is *no* need to have an extra mail file for
logrotate,
just get rid of it. Instead change MailScanner logging to a different file 
and then use something like that. Look at the last line!

/var/log/mailscanner.log {
    weekly
    compress
    dateext
    maxage 365
    rotate 99
    size=+4096k
    notifempty
    missingok
    copytruncate
}

BTW: your question should have gone to the MailScanner list, anyway.


Kai

-- 
Kai Sch?tzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com