Robert Nichols wrote: > Filipe Brandenburger wrote: >> Hi, >> >> On Sun, May 11, 2008 at 5:26 AM, Ned Slider <ned at unixmail.co.uk> wrote: >>> I have the following entries, below, in today's log file (for >>> yesterday, >>> 10th May). >>> >>> I don't run the automated yum-updated and didn't run a yum update >>> yesterday, and no packages were installed. Obviously the entries are >>> old. >>> >>> I was wondering if anyone could offer an explanation? >> >> Syslog does not print the year on log lines. Once I saw some strange >> behaviour similar to yours. I had a script that grep'd the logs for >> yesterday's date and sent it to me by e-mail. One day, I saw several >> SSH attempts from IPs that were empty, and IPs being resolved to names >> that were not the right ones. Then I logged in to the machine, looked >> at /var/log/secure and realized what happened. The logs were over one >> year old now. Maybe check /var/log/yum.log to see if that is what >> happened. > > I fixed that problem for yum by editing /etc/logrotate.d/yum and changing > "size 30k" to "size 10k". For CentOS, a 10 kilobyte log file is enough > to hold several months of yum activity, but small enough that the file > will be rotated before a year passes. You might also explore the > "monthly" or "yearly" options in logrotate. Right now I don't recall > what I didn't like about using those with the yum logs. > Thanks for that Bob. My yum.log was 28K so I've knocked the size setting down to 20K and will see how that goes. Thanks again, Ned