Solved

Logwatch messages file

Posted on 2013-05-10
3
188 Views
Last Modified: 2013-05-15
I'd like to change where the logwatch directory is placed - and limit it's size.  

Right now it's going into the /var/tmp area - which is set to 500MB.  The file size, however, will often exceed that (another issue altogether) - causing the tmp directory to fill up and consequently glitching out other things like MySQL.

I'd like to redirect it to another place (any directory - suggestions?) and limit it's file size to maybe 50-80MB.

How would I go about doing that?  :)

Thanks in advance -
0
Comment
Question by:erzoolander
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 2

Author Comment

by:erzoolander
ID: 39155747
Edit -

I think I know what's going on - so need to edit the question a bit.

What's happening, I believe, is that logwatch is attempting to process the log files.  During that process - it's filling up the tmp directory, at which point it fails - and therefore can't finish the process and/or clean up after itself.  So - it's leaving all it's work-in-progress crap sitting in tmp - undeleted.

So - limiting the file size (unless I'm limiting the file size of the /var/log file being analyzed) isn't the solution (and that might be one).

Rather - the solution appears to be that it needs to output to a different directory other than /var/tmp.

...and if so - how to do that?

I see a TmpDir = /tmp variable in the logwatch.conf file.  Is it that?  (and shouldn't it be /var/tmp - or is the /var assumed?)
0
 
LVL 29

Accepted Solution

by:
Jan Springer earned 500 total points
ID: 39156235
It should be /tmp and I don't see why you can't change it.
0
 
LVL 2

Author Closing Comment

by:erzoolander
ID: 39170349
That ended up being the solution.  I simply redirected the output for logwatch to an alternate directory (that had no file size restriction) and that cleared up the issue altogether.
0

Featured Post

Create the perfect environment for any meeting

You might have a modern environment with all sorts of high-tech equipment, but what makes it worthwhile is how you seamlessly bring together the presentation with audio, video and lighting. The ATEN Control System provides integrated control and system automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Over the last year I have answered a couple of basic URL rewriting questions several times so I thought I might as well have a stab at: explaining the basics, providing a few useful links and consolidating some of the most common queries into a sing…
In Solr 4.0 it is possible to atomically (or partially) update individual fields in a document. This article will show the operations possible for atomic updating as well as setting up your Solr instance to be able to perform the actions. One major …
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question