Logrotate not working on /usr/local/nagiosxi/var/*log
Posted: Mon Jan 16, 2023 10:37 am
Hi team,
I've been having issues with logrotate for Nagios. If I check at the status it says that the logs have been rotated, however when I check the size the files are still growing (they should be rotated if size is bigger than 5M):
usr/local/nagiosxi/var# cat /var/lib/logrotate/status | grep -i nag
"/usr/local/nagiosxi/var/reportengine.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/xidebug.log.backtrace" 2022-3-15-0:0:0
"/usr/local/nagiosxi/var/feedproc.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/cleaner.log" 2023-1-16-0:0:1
"/usr/local/nagiosxi/var/scheduledreporting.log" 2022-3-15-0:0:0
"/usr/local/nagiosxi/var/eventman.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/load_url.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/components/auditlog.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/sysstat.log" 2023-1-16-0:0:1
"/usr/local/nagiosxi/var/cmdsubsys.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/deadpool.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/event_handler.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/xidebug.log" 2022-3-15-0:0:0
"/usr/local/nagiosxi/var/wkhtmltox.log" 2022-3-15-0:0:0
"/usr/local/nagiosxi/var/dbmaint.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/perfdataproc.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/nom.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/recurringdowntime.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/snmptt_service_results.log" 2022-3-15-0:0:0
Using sysstat as an example It says that the sysstat was rotated at 2023-1-16-0:0:1 however if I check at the size of the file its way bigger than 5M:
/usr/local/nagiosxi/var# ls -lahSr
-rw-rw-r-- 1 nagios nagios 121M Jan 16 15:21 sysstat.log
Here are the settings nagios logrotate (I have tried with and without copytruncate):
cat /etc/logrotate.d/nagiosxi
/usr/local/nagiosxi/var/*log {
missingok
notifempty
size 5M
su nagios nagios
rotate 1
compress
}
/usr/local/nagiosxi/var/xidebug.log {
missingok
notifempty
size 100M
copytruncate
create 0660 www-data nagios
su www-data nagios
rotate 1
compress
}
/usr/local/nagiosxi/var/xidebug.log.backtrace {
missingok
notifempty
size 100M
copytruncate
create 0660 www-data nagios
su www-data nagios
rotate 1
compress
}
/usr/local/nagiosxi/var/components/auditlog.log {
missingok
notifempty
size 100M
copytruncate
create 0660 www-data nagios
su www-data nagios
rotate 1
compress
}
If I force logrotate to run manually running logrotate -f -v --log /tmp/logrotate_results.txt /etc/logrotate.d/nagiosxi it does work and the file gets rotated, but it is not working when the cron job runs daily.
I've been having issues with logrotate for Nagios. If I check at the status it says that the logs have been rotated, however when I check the size the files are still growing (they should be rotated if size is bigger than 5M):
usr/local/nagiosxi/var# cat /var/lib/logrotate/status | grep -i nag
"/usr/local/nagiosxi/var/reportengine.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/xidebug.log.backtrace" 2022-3-15-0:0:0
"/usr/local/nagiosxi/var/feedproc.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/cleaner.log" 2023-1-16-0:0:1
"/usr/local/nagiosxi/var/scheduledreporting.log" 2022-3-15-0:0:0
"/usr/local/nagiosxi/var/eventman.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/load_url.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/components/auditlog.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/sysstat.log" 2023-1-16-0:0:1
"/usr/local/nagiosxi/var/cmdsubsys.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/deadpool.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/event_handler.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/xidebug.log" 2022-3-15-0:0:0
"/usr/local/nagiosxi/var/wkhtmltox.log" 2022-3-15-0:0:0
"/usr/local/nagiosxi/var/dbmaint.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/perfdataproc.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/nom.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/recurringdowntime.log" 2023-1-11-17:39:57
"/usr/local/nagiosxi/var/snmptt_service_results.log" 2022-3-15-0:0:0
Using sysstat as an example It says that the sysstat was rotated at 2023-1-16-0:0:1 however if I check at the size of the file its way bigger than 5M:
/usr/local/nagiosxi/var# ls -lahSr
-rw-rw-r-- 1 nagios nagios 121M Jan 16 15:21 sysstat.log
Here are the settings nagios logrotate (I have tried with and without copytruncate):
cat /etc/logrotate.d/nagiosxi
/usr/local/nagiosxi/var/*log {
missingok
notifempty
size 5M
su nagios nagios
rotate 1
compress
}
/usr/local/nagiosxi/var/xidebug.log {
missingok
notifempty
size 100M
copytruncate
create 0660 www-data nagios
su www-data nagios
rotate 1
compress
}
/usr/local/nagiosxi/var/xidebug.log.backtrace {
missingok
notifempty
size 100M
copytruncate
create 0660 www-data nagios
su www-data nagios
rotate 1
compress
}
/usr/local/nagiosxi/var/components/auditlog.log {
missingok
notifempty
size 100M
copytruncate
create 0660 www-data nagios
su www-data nagios
rotate 1
compress
}
If I force logrotate to run manually running logrotate -f -v --log /tmp/logrotate_results.txt /etc/logrotate.d/nagiosxi it does work and the file gets rotated, but it is not working when the cron job runs daily.