1

2

3

4

$ logrotate -v

logrotate 3.7.8 - Copyright (C) 1995-2001 Red Hat, Inc.

Usage: logrotate [-dfv?] [-d|--debug] [-f|--force] [-m|--mail command] [-s|--state statefile] [-v|--verbose] [-?|--help] [--usage] [OPTION...] <configfile>

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

# see "man logrotate" for details

weekly

rotate 4

# create new (empty) log files after rotating old ones

create

# use date as a suffix of the rotated file

dateext

# uncomment this if you want your log files compressed

#compress

# RPM packages drop log rotation information into this directory

include /etc/logrotate.d

# no packages own wtmp and btmp -- we'll rotate them here

/var/log/wtmp {

monthly

create 0664 root utmp

minsize 1M

rotate 1

}

/var/log/btmp {

missingok

monthly

create 0600 root utmp

rotate 1

}

# system-specific logs may be also be configured here.

1

2

3

4

5

6

7

8

$ cat /etc/logrotate.d/yum

/var/log/yum.log {

missingok

notifempty

size 30k

yearly

create 0600 root root

}

1

2

3

$ crontab -e

*/30 * * * * /usr/sbin/logrotate /etc/logrotate.d/rsyslog > /dev/null 2>&1 &

1

2

3

4

5

6

7

8

9

$ cat /etc/cron.daily/logrotate

#!/bin/sh

/usr/sbin/logrotate /etc/logrotate.conf >/dev/null 2>&1

EXITVALUE=$?

if [ $EXITVALUE != 0 ]; then

/usr/bin/logger -t logrotate "ALERT exited abnormally with [$EXITVALUE]"

fi

exit 0

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

/Data/logs/production/*/*/*.log

/Data/logs/erp/*/*/*.log

/Data/logs/erp/mq_order/*/*/*.log

{

prerotate

# ....

endscript

#daily

rotate 10

size 5M

create 0644 karltest karltest

dateformat -%Y%m%d-%s

compress

missingok

postrotate

/bin/kill -HUP $(/bin/cat /var/run/syslogd.pid 2>/dev/null) &>/dev/null

endscript

}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

# tree -I "*gz|*log" /Data/logs/

/Data/logs/

├── gateway

│   ├── 172.31.70.18

│   │   └── archived

│   ├── 172.31.70.19

│   │   └── archived

│   ├── 172.31.70.195

│   │   └── archived

│   ├── 172.31.70.197

│   │   └── archived

│   ├── 172.31.70.198

│   │   └── archived

│   └── 172.31.70.20

│   └── archived

├── product

│   ├── 172.31.70.118

│   │   └── archived

│   ├── 172.31.70.119

│   │   └── archived

│   ├── 172.31.70.23

│   │   └── archived

│   └── 172.31.70.24

│   └── archived

...

# du -sh /Data/logs

271G /Data/logs

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

$ cat /etc/logrotate.d/karltest-custom-conf/logrotate-karltest-log-quick-run.conf

/Data/logs/karltest/*/*/*.log

/Data/logs/erp/*/*/*.log

/Data/logs/erp/mq_order/*/*/*.log

{

rotate 32

size 1024M # 对于 *-daily-run.conf，设置了较小阈值 5M

create 0644 karltest karltest

#dateformat -%Y%m%d-%s # 时间戳，已经由rsyslog产生了，这里不需要

compress

missingok

olddir archived # 归档目录

postrotate # 重启 rsyslog，让其 reopen 新的同名文件

/bin/kill -HUP $(/bin/cat /var/run/syslogd.pid 2>/dev/null) &>/dev/null

endscript

}

1

2

3

4

5

6

7

$ crontab -l

#Ansible: For server: Daily run - logrotate *.log under /Data/logs

1 0 * * * /bin/sh /Data/logs/.run_logrotate.sh create /etc/logrotate.d/karltest-custom-conf/logrotate-karltest-log-daily.conf -v >> /Data/logs/karltest_log_rotate_history.log 2>&1 &

#Ansible: For server: Quick run - logrotate *.log under /Data/logs

23 6,12,18 * * * /bin/sh /Data/logs/.run_logrotate.sh create /etc/logrotate.d/karltest-custom-conf/logrotate-karltest-log-quick-run.conf -v >> /Data/logs/karltest_log_rotate_history.log 2>&1 &

#Ansible: For server: older than file under /Data/logs

28 4 * * * /usr/bin/find /Data/logs -type f -mtime +30 -delete >> /Data/logs/karltest_log_rotate_history.log 2>&1 &

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

$ cat /etc/anacrontab

# /etc/anacrontab: configuration file for anacron

# See anacron(8) and anacrontab(5) for details.

SHELL=/bin/sh

PATH=/sbin:/bin:/usr/sbin:/usr/bin

MAILTO=root

# the maximal random delay added to the base delay of the jobs

RANDOM_DELAY=45

# the jobs will be started during the following hours only

START_HOURS_RANGE=3-22

#period in days delay in minutes job-identifier command

1 5 cron.daily nice run-parts /etc/cron.daily

7 25 cron.weekly nice run-parts /etc/cron.weekly

@monthly 45 cron.monthly nice run-parts

/etc/cron.monthly

1

2

3

postrotate

/bin/kill -HUP $(/bin/cat /var/run/syslogd.pid 2>/dev/null) &>/dev/null

endscript

1

2

3

4

5

6

7

copytruncate

Truncate the original log file in place after creating a copy, instead of moving the

old log file and optionally creating a new one. It can be used when some program

cannot be told to close its logfile and thus might continue writing (appending)

to the previous log file forever. **Note that there is a very small time slice between

copying the file and truncating it, so some logging data might be lost**. When this

option is used, the create option will have no effect, as the old log file stays in place.

1

2

3

# If there's no any log under that directory, it will complain:

error verifying log file path /Data/logs/*/*: No such file or directory