centos6 in regards to /etc/logrotate.d/syslog the file is in charge of processing /var/log/cron /var/log/maillog /var/log/messages /var/log/secure /var/log/spooler
If I wanted to make a specific setting just for maillog (since that file gets huge really quick) would I add
1- a new file /etc/logrotate.d/maillog with the parameters just like the other files
2- add parameters in the file it is already located in (/etc/log...d/syslog)
3- logrotate.conf where other settings for btmp and wtmp are located.
Which is the 'best practice' or preferred solution to changing the defaults for the files in the logrotate.d/syslog file.
Right now I have changed logrotate.conf to go off daily to keep the maillog from getting to huge. I do not know what the default is for size forcing the change, but when it got to 35MB logwatch was not properly accessing it and logrotate in debug mode was saying file too big must be config file.
There seems to be no setting for file size to force rotation for the log files in the logrotate.d/syslog file.
thanks bob