Hey!
That worked!
/var/log/logstash/* { daily rotate 7 copytruncate compress delaycompress missingok notifempty size 100M sharedscripts postrotate /bin/kill -HUP `cat /var/run/logstash.pid 2>/dev/null` 2> /dev/null || true endscript }
Thanks for the help!
Tim
On Sat, Mar 5, 2016 at 11:15 PM, Yamaban foerster@lisas.de wrote:
On Sun, 6 Mar 2016 04:34, Tim Dunphy <bluethundr@...> wrote:
Hey guys,
I'm trying to rotate a logstash log that can grow pretty large. 3.4GB last I saw!
And that's because the logrotate script I came up with didn't work.
The error I get on a syntax check is this:
#logrotate -f logstash size: '100M': No such file size: '100M': No such file size: '100M': No such file size: '100M': No such file size: '100M': No such file size: '100M': No such file size: '100M': No such file size: '100M': No such file
And this is the logstash rotate script:
#cat /etc/logrotate.d/logstash /var/log/logstash/* { daily rotate 7 copytruncate compress delaycompress missingok notifempty postrotate size 100M /bin/kill -HUP `cat /var/run/logstash.pid 2>/dev/null` 2> /dev/null || true endscript }
I can't find the error there. Can I have a suggestion as to what's wrong and how to correct it?
Multiple errors here, first hint: "man 8 logrotate" is a good start.
Second: wrong order of lines: diff -U2 [code] --- your logstash-rotate +++ corrected logstash-rotate @@ -7,6 +7,7 @@ missingok notifempty
postrotate size 100M
sharedscriptspostrotate /bin/kill -HUP `cat /var/run/logstash.pid 2>/dev/null` 2>/dev/null || true endscript [/code]
In short: "postrotate" line is in wrong position, add line "sharedscripts"
- Yamaban.
CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos