[prev in list] [next in list] [prev in thread] [next in thread]
List: forgerock-openidm
Subject: [OpenIDM] RE : RE : GZipping audit logs after a while
From: "Belleville-Rioux, Vincent" <rioux.vincent () uqam ! ca>
Date: 2015-02-05 14:45:08
Message-ID: 0AD36E0192997748BD28BC68B14C75D01645241D () Lettre ! gst ! uqam ! ca
[Download RAW message or body]
Wow, thanks for the share, Max!
Vincent
________________________________
De : openidm-bounces@forgerock.org [openidm-bounces@forgerock.org] de la pa=
rt de Max Spicer [max.spicer+openidm@york.ac.uk]
Date d'envoi : 5 f=E9vrier 2015 09:41
=C0 : openidm@forgerock.org
Objet : Re: [OpenIDM] RE : GZipping audit logs after a while
Here's my logrotate config for rotating openidm's audit and system logs. No=
te that I've created my own debian package for openidm that puts things in =
more standard locations.
Max
# /etc/logrotate.d/openidm
# Log rotate config for openidm's log files
daily
dateext
dateyesterday
# Backup to filename.ext.20140101.gz
dateformat .%Y%m%d
rotate 90
compress
missingok
# System log
/var/log/openidm/openidm.log {
# openidm doesn't handle its system logs being moved under it and there i=
s no
# way to tell it to close and reopen its log files
copytruncate
}
# Audit logs
# openidm automatically reopens the audit logs after they are rotated so
# there's no need to do anything special
/var/log/openidm/audit/*.csv {}
On 5 February 2015 at 14:30, Gael Allioux <gael.allioux@forgerock.com<mailt=
o:gael.allioux@forgerock.com>> wrote:
On 02/05/2015 03:28 PM, Belleville-Rioux, Vincent wrote:
Thanks.
I also found a script here : /bin/create-openidm-logrotate.sh
However I see that this script doesn't filter out csv files.
As noted here : http://www.janua.fr/tips-about-openidm-create-openidm-logro=
tate-sh-script/
Shouldn't it filter to *.csv ?
the /bin/create-openidm-logrotate.sh is not prefect. The janua.fr<http://ja=
nua.fr> tip you mention should be applied
otherwise it will rezip every single file I think
Thanks,
Vincent
________________________________
De : openidm-bounces@forgerock.org<mailto:openidm-bounces@forgerock.org> [o=
penidm-bounces@forgerock.org<mailto:openidm-bounces@forgerock.org>] de la p=
art de Max Spicer [max.spicer+openidm@york.ac.uk<mailto:max.spicer+openidm@=
york.ac.uk>]
Date d'envoi : 4 f=E9vrier 2015 16:31
=C0 : openidm@forgerock.org<mailto:openidm@forgerock.org>
Objet : Re: [OpenIDM] GZipping audit logs after a while
The audit logs are easy. Just set up logrotate to do them. OpenIDM will aut=
omatically reopen the log files when you rotate them. See my recent email t=
o the list if you want to do the system log as well as that requires more c=
areful handling.
Max
> On 4 Feb 2015 21:11, "Belleville-Rioux, Vincent" <rioux.vincent@uqam.ca<m=
ailto:rioux.vincent@uqam.ca>> wrote:
>>
>> I know there was a bit of discussion about this before, but anyone has a=
nything to share to accomplish simple automated daily rotation and gzipping=
of audit logs?
>>
>> Thanks,
>>
>> Vincent
>>
>> _______________________________________________
>> OpenIDM mailing list
>> OpenIDM@forgerock.org<mailto:OpenIDM@forgerock.org>
>> https://lists.forgerock.org/mailman/listinfo/openidm
>>
_______________________________________________
OpenIDM mailing list
OpenIDM@forgerock.org<mailto:OpenIDM@forgerock.org>
https://lists.forgerock.org/mailman/listinfo/openidm
_______________________________________________
OpenIDM mailing list
OpenIDM@forgerock.org<mailto:OpenIDM@forgerock.org>
https://lists.forgerock.org/mailman/listinfo/openidm
[Attachment #3 (text/html)]
<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" id="owaParaStyle"></style>
</head>
<body fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Wow, \
thanks for the share, Max! <div><br>
</div>
<div>Vincent<br>
<div><br>
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px">
<div style=""><br>
</div>
</div>
</div>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div id="divRpF883978" style="direction: ltr;"><font face="Tahoma" size="2" \
color="#000000"><b>De :</b> openidm-bounces@forgerock.org \
[openidm-bounces@forgerock.org] de la part de Max Spicer \
[max.spicer+openidm@york.ac.uk]<br> <b>Date d'envoi :</b> 5 février 2015 \
09:41<br> <b>À :</b> openidm@forgerock.org<br>
<b>Objet :</b> Re: [OpenIDM] RE : GZipping audit logs after a while<br>
</font><br>
</div>
<div></div>
<div>
<div dir="ltr">Here's my logrotate config for rotating openidm's audit and system \
logs. Note that I've created my own debian package for openidm that puts things in \
more standard locations. <div><br>
</div>
<div>Max</div>
<div><br>
</div>
<div>
<div># /etc/logrotate.d/openidm</div>
<div># Log rotate config for openidm's log files</div>
<div><br>
</div>
<div>daily</div>
<div>dateext</div>
<div>dateyesterday</div>
<div># Backup to filename.ext.20140101.gz</div>
<div>dateformat .%Y%m%d</div>
<div>rotate 90</div>
<div>compress</div>
<div>missingok</div>
<div><br>
</div>
<div># System log</div>
<div>/var/log/openidm/openidm.log {</div>
<div> # openidm doesn't handle its system logs being moved under it and there \
is no</div> <div> # way to tell it to close and reopen its log files</div>
<div> copytruncate</div>
<div>}</div>
<div><br>
</div>
<div># Audit logs</div>
<div># openidm automatically reopens the audit logs after they are rotated so</div>
<div># there's no need to do anything special</div>
<div>/var/log/openidm/audit/*.csv {}</div>
</div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On 5 February 2015 at 14:30, Gael Allioux <span dir="ltr">
<<a href="mailto:gael.allioux@forgerock.com" \
target="_blank">gael.allioux@forgerock.com</a>></span> wrote:<br> <blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; \
padding-left:1ex"> <div bgcolor="#FFFFFF"><span class=""><br>
<div>On 02/05/2015 03:28 PM, Belleville-Rioux, Vincent wrote:<br>
</div>
<blockquote type="cite">
<div style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt">Thanks.
<div><br>
</div>
<div>I also found a script here : /bin/create-openidm-logrotate.sh</div>
<div><br>
</div>
<div>However I see that this script doesn't filter out csv files. </div>
<div><br>
</div>
<div>As noted here : <a \
href="http://www.janua.fr/tips-about-openidm-create-openidm-logrotate-sh-script/" \
target="_blank">http://www.janua.fr/tips-about-openidm-create-openidm-logrotate-sh-script/</a><br>
<div><br>
</div>
<div>Shouldn't it filter to *.csv ?</div>
</div>
</div>
</blockquote>
<br>
</span>the /bin/create-openidm-logrotate.sh is not prefect. The <a \
href="http://janua.fr" target="_blank"> janua.fr</a> tip you mention should be \
applied<br> otherwise it will rezip every single file I think<span class=""><br>
<br>
<blockquote type="cite">
<div style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt">
<div>
<div><br>
</div>
<div>Thanks,</div>
<div><br>
</div>
<div>Vincent</div>
<div><br>
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px">
<div><br>
</div>
</div>
</div>
</div>
<div style="font-family:Times New Roman; color:#000000; font-size:16px">
<hr>
<div style="direction:ltr"><font color="#000000" face="Tahoma"><b>De :</b> <a \
href="mailto:openidm-bounces@forgerock.org" target="_blank"> \
openidm-bounces@forgerock.org</a> [<a href="mailto:openidm-bounces@forgerock.org" \
target="_blank">openidm-bounces@forgerock.org</a>] de la part de Max Spicer [<a \
href="mailto:max.spicer+openidm@york.ac.uk" \
target="_blank">max.spicer+openidm@york.ac.uk</a>]<br> <b>Date d'envoi :</b> 4 \
février 2015 16:31<br> <b>À :</b> <a href="mailto:openidm@forgerock.org" \
target="_blank">openidm@forgerock.org</a><br> <b>Objet :</b> Re: [OpenIDM] GZipping \
audit logs after a while<br> </font><br>
</div>
<div>
<p dir="ltr">The audit logs are easy. Just set up logrotate to do them. OpenIDM will \
automatically reopen the log files when you rotate them. See my recent email to the \
list if you want to do the system log as well as that requires more careful \
handling.</p> <p dir="ltr">Max</p>
<p dir="ltr">> On 4 Feb 2015 21:11, "Belleville-Rioux, Vincent" <<a \
href="mailto:rioux.vincent@uqam.ca" target="_blank">rioux.vincent@uqam.ca</a>> \
wrote:<br> >><br>
>> I know there was a bit of discussion about this before, but anyone has \
anything to share to accomplish simple automated daily rotation and gzipping of audit \
logs?<br> >><br>
>> Thanks,<br>
>><br>
>> Vincent<br>
>><br>
>> _______________________________________________<br>
>> OpenIDM mailing list<br>
>> <a href="mailto:OpenIDM@forgerock.org" \
target="_blank">OpenIDM@forgerock.org</a><br> >> <a \
href="https://lists.forgerock.org/mailman/listinfo/openidm" target="_blank"> \
https://lists.forgerock.org/mailman/listinfo/openidm</a><br> >><br>
</p>
</div>
</div>
</div>
</div>
<br>
<fieldset target="_blank"></fieldset> <br>
<pre>_______________________________________________
OpenIDM mailing list
<a href="mailto:OpenIDM@forgerock.org" target="_blank">OpenIDM@forgerock.org</a>
<a href="https://lists.forgerock.org/mailman/listinfo/openidm" \
target="_blank">https://lists.forgerock.org/mailman/listinfo/openidm</a> </pre>
</blockquote>
<br>
</span></div>
<br>
_______________________________________________<br>
OpenIDM mailing list<br>
<a href="mailto:OpenIDM@forgerock.org" target="_blank">OpenIDM@forgerock.org</a><br>
<a href="https://lists.forgerock.org/mailman/listinfo/openidm" \
target="_blank">https://lists.forgerock.org/mailman/listinfo/openidm</a><br> <br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</body>
</html>
_______________________________________________
OpenIDM mailing list
OpenIDM@forgerock.org
https://lists.forgerock.org/mailman/listinfo/openidm
--===============8694974543376868683==--
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic