Hi all
I just saw that I miss some log files in /var/log/httpd. There is a gap in January/February2016, no logs are available for this period. It seemed to work fine with the earlier logs as you can see. Has someone an explanation for this?
It's a Centos 7.2 VM with Apache 2.4 running ownCloud only. Default logrotate config.
-rw-r--r-- 1 root root 3367604 Apr 20 16:12 ssl_access_log -rw-r--r-- 1 root root 67982 Jul 12 2015 ssl_access_log-20150712.gz -rw-r--r-- 1 root root 43515 Jul 18 2015 ssl_access_log-20150719.gz -rw-r--r-- 1 root root 36096 Jul 26 2015 ssl_access_log-20150727.gz -rw-r--r-- 1 root root 25088 Aug 1 2015 ssl_access_log-20150802.gz -rw-r--r-- 1 root root 12733 Aug 9 2015 ssl_access_log-20150810.gz -rw-r--r-- 1 root root 89873 Aug 15 2015 ssl_access_log-20150816.gz -rw-r--r-- 1 root root 70627 Aug 23 2015 ssl_access_log-20150823.gz -rw-r--r-- 1 root root 91576 Aug 31 2015 ssl_access_log-20150831.gz -rw-r--r-- 1 root root 218188 Sep 6 2015 ssl_access_log-20150906.gz -rw-r--r-- 1 root root 181084 Sep 14 2015 ssl_access_log-20150914.gz -rw-r--r-- 1 root root 247666 Sep 20 2015 ssl_access_log-20150920.gz -rw-r--r-- 1 root root 221203 Sep 28 2015 ssl_access_log-20150928.gz -rw-r--r-- 1 root root 173962 Oct 4 2015 ssl_access_log-20151004.gz -rw-r--r-- 1 root root 131480 Oct 11 2015 ssl_access_log-20151011.gz -rw-r--r-- 1 root root 141485 Oct 19 2015 ssl_access_log-20151019.gz -rw-r--r-- 1 root root 89379 Oct 25 03:37 ssl_access_log-20151025.gz -rw-r--r-- 1 root root 149943 Nov 1 13:30 ssl_access_log-20151102.gz -rw-r--r-- 1 root root 150219 Nov 8 03:11 ssl_access_log-20151108.gz -rw-r--r-- 1 root root 131524 Nov 14 20:13 ssl_access_log-20151115.gz -rw-r--r-- 1 root root 153841 Nov 22 03:42 ssl_access_log-20151122.gz -rw-r--r-- 1 root root 134209 Nov 29 23:41 ssl_access_log-20151130.gz -rw-r--r-- 1 root root 336448 Dec 6 03:11 ssl_access_log-20151206.gz -rw-r--r-- 1 root root 357256 Dec 14 03:15 ssl_access_log-20151214.gz -rw-r--r-- 1 root root 354106 Dec 20 03:38 ssl_access_log-20151220.gz -rw-r--r-- 1 root root 204874 Dec 28 03:41 ssl_access_log-20151228.gz -rw-r--r-- 1 root root 13621 Jan 3 03:05 ssl_access_log-20160103.gz -rw-r--r-- 1 root root 4385823 Mar 27 04:19 ssl_access_log-20160327 -rw-r--r-- 1 root root 4345075 Apr 4 03:40 ssl_access_log-20160404 -rw-r--r-- 1 root root 4743540 Apr 10 03:04 ssl_access_log-20160410 -rw-r--r-- 1 root root 6065044 Apr 17 03:20 ssl_access_log-20160417
Regards Adrian Jenzer
Adrian,
I’ve had huge problems with log rotate recently. For some reason, since the period you have mentioned, I have to restart rsyslog on my CentOS 6.7 servers after logrotate runs either through a cronjob or manually (even on the standard config). I’m not sure if you’ve experienced this to or whether they are linked - but there’s definitely been issues since January with logrotate.
Kindest regards,
James Washington
On 21 April 2016 at 16:00:39, Adrian Jenzer (a.jenzer@herzogdemeuron.com) wrote:
Hi all
I just saw that I miss some log files in /var/log/httpd. There is a gap in January/February2016, no logs are available for this period. It seemed to work fine with the earlier logs as you can see. Has someone an explanation for this?
It's a Centos 7.2 VM with Apache 2.4 running ownCloud only. Default logrotate config.
-rw-r--r-- 1 root root 3367604 Apr 20 16:12 ssl_access_log -rw-r--r-- 1 root root 67982 Jul 12 2015 ssl_access_log-20150712.gz -rw-r--r-- 1 root root 43515 Jul 18 2015 ssl_access_log-20150719.gz -rw-r--r-- 1 root root 36096 Jul 26 2015 ssl_access_log-20150727.gz -rw-r--r-- 1 root root 25088 Aug 1 2015 ssl_access_log-20150802.gz -rw-r--r-- 1 root root 12733 Aug 9 2015 ssl_access_log-20150810.gz -rw-r--r-- 1 root root 89873 Aug 15 2015 ssl_access_log-20150816.gz -rw-r--r-- 1 root root 70627 Aug 23 2015 ssl_access_log-20150823.gz -rw-r--r-- 1 root root 91576 Aug 31 2015 ssl_access_log-20150831.gz -rw-r--r-- 1 root root 218188 Sep 6 2015 ssl_access_log-20150906.gz -rw-r--r-- 1 root root 181084 Sep 14 2015 ssl_access_log-20150914.gz -rw-r--r-- 1 root root 247666 Sep 20 2015 ssl_access_log-20150920.gz -rw-r--r-- 1 root root 221203 Sep 28 2015 ssl_access_log-20150928.gz -rw-r--r-- 1 root root 173962 Oct 4 2015 ssl_access_log-20151004.gz -rw-r--r-- 1 root root 131480 Oct 11 2015 ssl_access_log-20151011.gz -rw-r--r-- 1 root root 141485 Oct 19 2015 ssl_access_log-20151019.gz -rw-r--r-- 1 root root 89379 Oct 25 03:37 ssl_access_log-20151025.gz -rw-r--r-- 1 root root 149943 Nov 1 13:30 ssl_access_log-20151102.gz -rw-r--r-- 1 root root 150219 Nov 8 03:11 ssl_access_log-20151108.gz -rw-r--r-- 1 root root 131524 Nov 14 20:13 ssl_access_log-20151115.gz -rw-r--r-- 1 root root 153841 Nov 22 03:42 ssl_access_log-20151122.gz -rw-r--r-- 1 root root 134209 Nov 29 23:41 ssl_access_log-20151130.gz -rw-r--r-- 1 root root 336448 Dec 6 03:11 ssl_access_log-20151206.gz -rw-r--r-- 1 root root 357256 Dec 14 03:15 ssl_access_log-20151214.gz -rw-r--r-- 1 root root 354106 Dec 20 03:38 ssl_access_log-20151220.gz -rw-r--r-- 1 root root 204874 Dec 28 03:41 ssl_access_log-20151228.gz -rw-r--r-- 1 root root 13621 Jan 3 03:05 ssl_access_log-20160103.gz -rw-r--r-- 1 root root 4385823 Mar 27 04:19 ssl_access_log-20160327 -rw-r--r-- 1 root root 4345075 Apr 4 03:40 ssl_access_log-20160404 -rw-r--r-- 1 root root 4743540 Apr 10 03:04 ssl_access_log-20160410 -rw-r--r-- 1 root root 6065044 Apr 17 03:20 ssl_access_log-20160417
Regards Adrian Jenzer
_______________________________________________ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
It looks like logrotate changed behaviour and started to delete old logs instead of compressing them. As you can see it just wiped away the one from 20160327, and that with all configs on default. Does someone know how to fix this??
-rw-r--r-- 1 root root 357256 Dec 14 03:15 ssl_access_log-20151214.gz -rw-r--r-- 1 root root 354106 Dec 20 03:38 ssl_access_log-20151220.gz -rw-r--r-- 1 root root 204874 Dec 28 03:41 ssl_access_log-20151228.gz -rw-r--r-- 1 root root 13621 Jan 3 03:05 ssl_access_log-20160103.gz -rw-r--r-- 1 root root 4345075 Apr 4 03:40 ssl_access_log-20160404 -rw-r--r-- 1 root root 4743540 Apr 10 03:04 ssl_access_log-20160410 -rw-r--r-- 1 root root 6064766 Apr 22 17:45 ssl_access_log-20160422 -rw-r--r-- 1 root root 35837 Apr 25 11:00 ssl_access_log-20160426
On the prod-server I added now "rotate 300" to /etc/logroate.d/httpd to prevent losing more logs. It keeps the logs now but doesn't compress them anymore.
Thanks Regards Adrian
-----Original Message----- From: centos-bounces@centos.org [mailto:centos-bounces@centos.org] On Behalf Of James Washington Sent: Donnerstag, 21. April 2016 17:16 To: CentOS mailing list Subject: Re: [CentOS] Apache logs missing
Adrian,
I’ve had huge problems with log rotate recently. For some reason, since the period you have mentioned, I have to restart rsyslog on my CentOS 6.7 servers after logrotate runs either through a cronjob or manually (even on the standard config). I’m not sure if you’ve experienced this to or whether they are linked - but there’s definitely been issues since January with logrotate.
Kindest regards,
James Washington
On 21 April 2016 at 16:00:39, Adrian Jenzer (a.jenzer@herzogdemeuron.com) wrote:
Hi all
I just saw that I miss some log files in /var/log/httpd. There is a gap in January/February2016, no logs are available for this period. It seemed to work fine with the earlier logs as you can see. Has someone an explanation for this?
It's a Centos 7.2 VM with Apache 2.4 running ownCloud only. Default logrotate config.
-rw-r--r-- 1 root root 3367604 Apr 20 16:12 ssl_access_log -rw-r--r-- 1 root root 67982 Jul 12 2015 ssl_access_log-20150712.gz -rw-r--r-- 1 root root 43515 Jul 18 2015 ssl_access_log-20150719.gz -rw-r--r-- 1 root root 36096 Jul 26 2015 ssl_access_log-20150727.gz -rw-r--r-- 1 root root 25088 Aug 1 2015 ssl_access_log-20150802.gz -rw-r--r-- 1 root root 12733 Aug 9 2015 ssl_access_log-20150810.gz -rw-r--r-- 1 root root 89873 Aug 15 2015 ssl_access_log-20150816.gz -rw-r--r-- 1 root root 70627 Aug 23 2015 ssl_access_log-20150823.gz -rw-r--r-- 1 root root 91576 Aug 31 2015 ssl_access_log-20150831.gz -rw-r--r-- 1 root root 218188 Sep 6 2015 ssl_access_log-20150906.gz -rw-r--r-- 1 root root 181084 Sep 14 2015 ssl_access_log-20150914.gz -rw-r--r-- 1 root root 247666 Sep 20 2015 ssl_access_log-20150920.gz -rw-r--r-- 1 root root 221203 Sep 28 2015 ssl_access_log-20150928.gz -rw-r--r-- 1 root root 173962 Oct 4 2015 ssl_access_log-20151004.gz -rw-r--r-- 1 root root 131480 Oct 11 2015 ssl_access_log-20151011.gz -rw-r--r-- 1 root root 141485 Oct 19 2015 ssl_access_log-20151019.gz -rw-r--r-- 1 root root 89379 Oct 25 03:37 ssl_access_log-20151025.gz -rw-r--r-- 1 root root 149943 Nov 1 13:30 ssl_access_log-20151102.gz -rw-r--r-- 1 root root 150219 Nov 8 03:11 ssl_access_log-20151108.gz -rw-r--r-- 1 root root 131524 Nov 14 20:13 ssl_access_log-20151115.gz -rw-r--r-- 1 root root 153841 Nov 22 03:42 ssl_access_log-20151122.gz -rw-r--r-- 1 root root 134209 Nov 29 23:41 ssl_access_log-20151130.gz -rw-r--r-- 1 root root 336448 Dec 6 03:11 ssl_access_log-20151206.gz -rw-r--r-- 1 root root 357256 Dec 14 03:15 ssl_access_log-20151214.gz -rw-r--r-- 1 root root 354106 Dec 20 03:38 ssl_access_log-20151220.gz -rw-r--r-- 1 root root 204874 Dec 28 03:41 ssl_access_log-20151228.gz -rw-r--r-- 1 root root 13621 Jan 3 03:05 ssl_access_log-20160103.gz -rw-r--r-- 1 root root 4385823 Mar 27 04:19 ssl_access_log-20160327 -rw-r--r-- 1 root root 4345075 Apr 4 03:40 ssl_access_log-20160404 -rw-r--r-- 1 root root 4743540 Apr 10 03:04 ssl_access_log-20160410 -rw-r--r-- 1 root root 6065044 Apr 17 03:20 ssl_access_log-20160417
Regards Adrian Jenzer
_______________________________________________ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Adrian Jenzer писал 2016-04-28 11:04:
It looks like logrotate changed behaviour and started to delete old logs instead of compressing them. As you can see it just wiped away the one from 20160327, and that with all configs on default. Does someone know how to fix this??