[CentOS] Re: Today's log - yum entries

[Ned Slider]

Robert Nichols wrote:
> Filipe Brandenburger wrote:
>> Hi,
>>
>> On Sun, May 11, 2008 at 5:26 AM, Ned Slider <ned at unixmail.co.uk> wrote:
>>>  I have the following entries, below, in today's log file (for 
>>> yesterday,
>>> 10th May).
>>>
>>>  I don't run the automated yum-updated and didn't run a yum update
>>> yesterday, and no packages were installed. Obviously the entries are 
>>> old.
>>>
>>>  I was wondering if anyone could offer an explanation?
>>
>> Syslog does not print the year on log lines. Once I saw some strange
>> behaviour similar to yours. I had a script that grep'd the logs for
>> yesterday's date and sent it to me by e-mail. One day, I saw several
>> SSH attempts from IPs that were empty, and IPs being resolved to names
>> that were not the right ones. Then I logged in to the machine, looked
>> at /var/log/secure and realized what happened. The logs were over one
>> year old now. Maybe check /var/log/yum.log to see if that is what
>> happened.
> 
> I fixed that problem for yum by editing /etc/logrotate.d/yum and changing
> "size 30k" to "size 10k".  For CentOS, a 10 kilobyte log file is enough
> to hold several months of yum activity, but small enough that the file
> will be rotated before a year passes.  You might also explore the
> "monthly" or "yearly" options in logrotate.  Right now I don't recall
> what I didn't like about using those with the yum logs.
> 

Thanks for that Bob. My yum.log was 28K so I've knocked the size setting 
down to 20K and will see how that goes.

Thanks again,

Ned