[CentOS] Re: Today's log - yum entries

Sun May 11 14:43:11 UTC 2008
Ned Slider <ned at unixmail.co.uk>

Robert Nichols wrote:
> Filipe Brandenburger wrote:
>> Hi,
>> On Sun, May 11, 2008 at 5:26 AM, Ned Slider <ned at unixmail.co.uk> wrote:
>>>  I have the following entries, below, in today's log file (for 
>>> yesterday,
>>> 10th May).
>>>  I don't run the automated yum-updated and didn't run a yum update
>>> yesterday, and no packages were installed. Obviously the entries are 
>>> old.
>>>  I was wondering if anyone could offer an explanation?
>> Syslog does not print the year on log lines. Once I saw some strange
>> behaviour similar to yours. I had a script that grep'd the logs for
>> yesterday's date and sent it to me by e-mail. One day, I saw several
>> SSH attempts from IPs that were empty, and IPs being resolved to names
>> that were not the right ones. Then I logged in to the machine, looked
>> at /var/log/secure and realized what happened. The logs were over one
>> year old now. Maybe check /var/log/yum.log to see if that is what
>> happened.
> I fixed that problem for yum by editing /etc/logrotate.d/yum and changing
> "size 30k" to "size 10k".  For CentOS, a 10 kilobyte log file is enough
> to hold several months of yum activity, but small enough that the file
> will be rotated before a year passes.  You might also explore the
> "monthly" or "yearly" options in logrotate.  Right now I don't recall
> what I didn't like about using those with the yum logs.

Thanks for that Bob. My yum.log was 28K so I've knocked the size setting 
down to 20K and will see how that goes.

Thanks again,