On 2020-03-16 15:43, Michael Biebl wrote:
logrotate is run daily, so I don't see how I can make the logs rotated hourly.
My fault, I see logrotate and rsyslog as a unit. Please ignore the part about "hourly cron jobs".
Also, maxsize doesn't really help either in case of a rogue application as you can easily fill a /var/log partition within one day (or even one hour) before logrotate is actually run.
Sure, but setting maxsize to 1G reduces the risk and doesn't cost very much. Especially looking at the weekly rotation schedule of most of rsyslog's logfiles in rsyslog.logrotate. Your choice. Keep on your good work Harri
