Strange syslog behaviour [Solved]

From	Jeremy Ardley <jeremy@ardley.org>
Newsgroups	linux.debian.user
Subject	Strange syslog behaviour [Solved]
Date	2022-04-11 04:10 +0200
Message-ID	<EaRF7-7Vqm-1@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

I have systems (armbian) that had anomalous behaviour.

This included sometimes writing to /var/log/syslog.1 rather than to 
/var/log/syslog (which was created, but zero size)

Additionally the logrotate was happening daily or twice daily when 
seemingly configured for weekly rotates

Anyway long story short, at some stage some package updates must have 
written an extra file into /etc/logrotate.d that had duplicate entries 
to the normal files.

This was interpreted by the logrotate process as well as the intended 
files such as /etc/logrotated.d/rsyslog

On one system this unexpected file was called rsyslog.dpkg-old on 
another system it was rsyslog.dpkg-dist

Removing these files ( but not /etc/logrotate.d/dpkg ) now has a 
correctly configured log rotation


-- 
Jeremy

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Strange syslog behaviour [Solved] Jeremy Ardley <jeremy@ardley.org> - 2022-04-11 04:10 +0200
  Re: Strange syslog behaviour [Solved] David Wright <deblis@lionunicorn.co.uk> - 2022-04-11 05:50 +0200
    Re: Strange syslog behaviour [Solved] Jeremy Ardley <jeremy@ardley.org> - 2022-04-11 06:10 +0200
      Re: Strange syslog behaviour [Solved] Jeremy Ardley <jeremy@ardley.org> - 2022-04-12 00:40 +0200
        Re: Strange syslog behaviour [Solved] Jeremy Ardley <jeremy@ardley.org> - 2022-04-12 01:10 +0200
      Re: Strange syslog behaviour [Solved] David Wright <deblis@lionunicorn.co.uk> - 2022-04-12 01:00 +0200

csiph-web