[Date Prev][Date Next] [Chronological] [Thread] [Top]

Q: using logrotate for auditlog file

Apologies for having top-posted before.


On Thu, Jul 17, 2014 at 8:26 AM, Ulrich Windl <Ulrich.Windl@rz.uni-regensburg.de> wrote:
>>> Marco Pizzoli <marco.pizzoli@gmail.com> schrieb am 16.07.2014 um 16:42 in
Nachricht
<CAMrrtwsN1HiHgbeM-E+ZyfJh4o2CuPFivD4e0CQfcvRGSKECnA@mail.gmail.com>:
> Hi Ulrich,
> yes but leveraging the "copytruncate" option of logrotate. So you don't
> have to worry about the open state of the file.

Hi!

Thanks for the answer.
If one process has the file open for appending and another process truncates the file, won't the other process create a sparse file then (continuing to append at ist previous position?


Regards,
Ulrich

>
> HTH
> Marco
>
>
> On Wed, Jul 16, 2014 at 3:54 PM, Ulrich Windl <
> Ulrich.Windl@rz.uni-regensburg.de> wrote:
>
>> Hi!
>>
>> The manual does not say whether the file auditlog uses is kept open all
>> the time, or is opened whenever a record is added. The difference is
>> important if you want to use logrotate to rotate the auditlog file. I don't
>> want to restart slapd when rotating the logs. That would be overkill.
>> Has anybody done this with success?
>>
>> Regards,
>> Ulrich
>>
>>
>>
>>




Long story short: it works for this specific use case.