Control: tags -1 + moreinfo

Am 16.03.20 um 10:43 schrieb Harald Dunkel:
> Package: rsyslog
> Version: 8.1901.0-1
> Severity: wishlist
> 
> Using syslog it is easy to write a few GBytes/hour logfiles, e.g. via
> #954065, so I would suggest to run the logrotate for rsyslog hourly

logrotate is run daily, so I don't see how I can make the logs rotated
hourly.
Also, maxsize doesn't really help either in case of a rogue application
as you can easily fill a /var/log partition within one day (or even one
hour) before logrotate is actually run.

logrotate would have to constantly monitor the log file sizes, which it
doesn't do.

In summary, what you propose will not actually help against something
like #954065

Michael

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to