LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 01-29-2008, 11:18 AM   #1
mg92865
Member
 
Registered: Jun 2006
Distribution: Ubuntu
Posts: 35

Rep: Reputation: 16
Which log files should be reviewed


Hello,

I normally don't go into the log files, but dived in looking for info on what I had installed in the past few days. There seem to be a lot of files in the /var/log folder, some already compressed. I likely need to review these, maybe even clean out, but where to start is the question.

For log files in general, is any experienced user willing to suggest which can be ignored, which should be reviewed, maybe even an opinion as to which are the most important to review. Size of the folder is 8 mb with about 280 files.

How long do I keep log files?

Thank for any suggestions that are offered.

mg92865
 
Old 01-29-2008, 11:33 AM   #2
farslayer
LQ Guru
 
Registered: Oct 2005
Location: Willoughby, Ohio
Distribution: linuxdebian
Posts: 7,232
Blog Entries: 5

Rep: Reputation: 190Reputation: 190
Typically most distributions have something like logrotate installed.

logrotate will automatically archive your old log files and delete them after a specified period of time. it pretty much automates the process of keeping your logs manageable.

I'd be surprised if this isn't already installed and running on your Ubuntu machine.
 
Old 01-29-2008, 11:54 AM   #3
BrianCarpio
LQ Newbie
 
Registered: Jan 2008
Posts: 2

Rep: Reputation: 0
You should review /var/log/messages and /var/log/secure. Logrotate does rotate the logs for you so the size doesn't get out of control, but if you aren't reviewing your logs then logrotate is useless, actually its casing more problems then it fixes.

Besides viewing your logs you might want to look into installing an application such as logwatch this will email you important information about your system. It might be installed already if it is type

#> mail

from the command line and see if you have a bunch of email read these emails they are probably the logwatch reports.
 
Old 01-29-2008, 04:28 PM   #4
farslayer
LQ Guru
 
Registered: Oct 2005
Location: Willoughby, Ohio
Distribution: linuxdebian
Posts: 7,232
Blog Entries: 5

Rep: Reputation: 190Reputation: 190
Just noticed you were looking for the log for what you have installed..

/var/log/dpkg.log

dpkg is the Debian package manager, so this log should contain anything you have installed using dpkg, apt-get, aptitude, or synaptic
 
Old 01-31-2008, 10:57 AM   #5
mg92865
Member
 
Registered: Jun 2006
Distribution: Ubuntu
Posts: 35

Original Poster
Rep: Reputation: 16
Thanks for the comments - problem solved

Thanks to all who contributed. I found the log showing which items had been installed, and corrected the problems that it created.

mg92865
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Popular distributions reviewed aerdt Linux - Distributions 7 08-24-2007 02:49 PM
Slackware 11 Released, and Reviewed. slackMeUp Linux - News 11 06-29-2007 11:30 AM
Deleted /var/log/messages, can't log any files-iptables chingyenccy Linux - Newbie 7 02-27-2005 05:03 PM
LinuxQuestions.org got reviewed Zuggy General 4 12-20-2004 04:27 PM
Can log files be time stamped? (such as FTP login and transfer log files) bripage Linux - Networking 6 08-08-2002 11:55 PM


All times are GMT -5. The time now is 12:27 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration