Logrotate don't work with my log format

Jerome.d · 02-01-2017, 05:26 AM

Hello,
I have problem with Logrotate.
my log names have this format :

Code:

imap-2017-01-02.log
imap-2017-01-08.log
imap-2017-01-13.log
...

my logrotate config file containt :

Code:

/var/log/qspot/*.log {
        daily
        rotate 7
        copytruncate
        compress
        delaycompress
        create 640 root
        missingok
        notifempty
}

And when i launch Logrotate, I have this result :

Code:

rotating pattern: /var/log/qspot/*.log  after 1 days (7 rotations)
empty log files are not rotated, old logs are removed
considering log /var/log/qspot/imap-2017-01-02.log
  log does not need rotating
considering log /var/log/qspot/imap-2017-01-04.log
  log does not need rotating
considering log /var/log/qspot/imap-2017-01-05.log
  log does not need rotating
considering log /var/log/qspot/imap-2017-01-06.log
  log does not need rotating...

It sees all my files, but as it is one per day, it does not take into account the parameters of rotation

I understand that I do not use the correct syntax, but I can not find examples for this format of log.

Of course, I do not change the name of my log files

Can you help me ?

TenTenths · 02-01-2017, 06:01 AM

What's the output of?

Code:

ls -l /var/log/qspot/*.log

Jerome.d · 02-01-2017, 07:08 AM

Code:

root@GRELPSUP229:/etc/logrotate.d# ls -l /var/log/qspot/*.log
-rw-r--r-- 1 logstash logstash  24448 janv. 22 03:00 /var/log/qspot/imap-2017-01-02.log
-rw-r--r-- 1 logstash logstash 125312 janv. 22 03:00 /var/log/qspot/imap-2017-01-04.log
-rw-r--r-- 1 logstash logstash 302005 janv. 22 03:00 /var/log/qspot/imap-2017-01-05.log
-rw-r--r-- 1 logstash logstash 962275 janv. 19 11:53 /var/log/qspot/imap-2017-01-06.log
-rw-r--r-- 1 logstash logstash 442124 janv. 19 11:53 /var/log/qspot/imap-2017-01-07.log
-rw-r--r-- 1 logstash logstash  20439 janv. 19 11:53 /var/log/qspot/imap-2017-01-08.log
-rw-r--r-- 1 logstash logstash 432597 janv. 22 03:00 /var/log/qspot/imap-2017-01-09.log
-rw-r--r-- 1 logstash logstash 498428 janv. 19 11:54 /var/log/qspot/imap-2017-01-10.log
-rw-r--r-- 1 logstash logstash 676182 janv. 22 03:00 /var/log/qspot/imap-2017-01-11.log
-rw-r--r-- 1 logstash logstash 465983 janv. 19 11:54 /var/log/qspot/imap-2017-01-12.log
-rw-r--r-- 1 logstash logstash 429288 janv. 19 11:54 /var/log/qspot/imap-2017-01-13.log
-rw-r--r-- 1 logstash logstash 487157 janv. 19 11:54 /var/log/qspot/imap-2017-01-14.log
-rw-r--r-- 1 logstash logstash  53281 janv. 19 11:54 /var/log/qspot/imap-2017-01-15.log
-rw-r--r-- 1 logstash logstash 379475 janv. 22 03:00 /var/log/qspot/imap-2017-01-16.log
-rw-r--r-- 1 logstash logstash 425763 janv. 19 11:54 /var/log/qspot/imap-2017-01-17.log
-rw-r--r-- 1 logstash logstash 486805 janv. 19 11:54 /var/log/qspot/imap-2017-01-18.log
-rw-r--r-- 1 logstash logstash 470536 janv. 19 21:20 /var/log/qspot/imap-2017-01-19.log
-rw-r--r-- 1 logstash logstash 660484 janv. 22 03:00 /var/log/qspot/imap-2017-01-20.log
-rw-r--r-- 1 logstash logstash 417603 janv. 21 21:10 /var/log/qspot/imap-2017-01-21.log

Jjanel · 02-02-2017, 05:28 PM

Hi! logrotate is one of the things I want to learn... Here's a couple *WILD guesses*: [man]

"It will not modify a log multiple times in one day unless the criterium for that log is based on the log’s size and logrotate is being run multiple times each day, or unless the
-f or -force option is used." ...
-v Turn on verbose mode.

/var/lib/logrotate.status Default state file. [what's in here??]
"How logrotate remembers...": https://support.rackspace.com/how-to...oubleshooting/

"The debug flag, “-d”, tells logrotate to go through the motions of rotating logs but not actually rotate them. It can be handy if you want to test a new config file but don’t want any actual log rotation run when you do (if you’re working on a production server, for example)."

>-rw-r--r-- 1 logstash logstash 24448 janv. 22 03:00 /var/log/qspot/imap-2017-01-02.log
The *recent* janv.22 vs. -01-02.log scared me for a moment, but probably -not- an issue.

I **welcome other LQ'ers input here!**