home bbs files messages ]

Just a sample of the Echomail archive

COMPOSL3:

<< oldest | < older | list | newer > | newest >> ]

 Message 134,854 of 135,166 
 Carlos E.R. to All 
 Re: ever had 1GB+ kern.log (and syslog)  
 16 Jan 26 22:23:08 
 
From: robin_listas@es.invalid

On 2026-01-16 22:03, Lawrence D’Oliveiro wrote:
> On Fri, 16 Jan 2026 21:40:30 +0100, Carlos E.R. wrote:
>
>> Way too complicated.
>
> First you said it couldn’t be done at all -- that it was
> “intentionally impossible”, and “intentionally not implemented by the
> journal”. Now when I point out it can be done quite easily,
> potentially with just a few lines of script, you claim that’s “way too
> complicated”.

It is way too complicated. I want tools provided by the systemd people, not
hacks.

Remember, I was simply commenting a feature that syslog has as default, and
systemd refuses to implement.

> What I think is, it’s your existing way of laboriously copying and
> filtering text-format logfiles with your own (likely regexp-heavy)
> custom scripting, that is “way too complicated”, and you are suffering
> from something called the “sunk-cost fallacy”, where you don’t want to
> throw away all the effort you have put into your existing ways of
> doing things, even if the new way is simpler.

I am using no scripting at all. I use the default toolset for handling syslog
messages for decades of *nix.

/etc/rsyslog.conf:    (this configuration came with the system, commented out,
so I just had to uncoment it)

news.crit                               -/var/log/news/news.crit
news.err                                -/var/log/news/news.err
news.notice                             -/var/log/news/news.notice
news.debug                              -/var/log/news/news.debug


/etc/logrotate.d/syslog:    (this configuration is the same as default for
other files)

/var/log/news/news.crit /var/log/news/news.err /var/log/news/news.notice {
     compress
     dateext
     maxage 365
     rotate 99
     missingok
     notifempty
     size +4096k
     su news news
     create 640 news news
     sharedscripts
     postrotate
         /usr/bin/systemctl reload syslog.service > /dev/null
#       /etc/init.d/syslog reload > /dev/null
     endscript
}


#CER news.debug is very verbose, not needed to keep long.
/var/log/news/news.debug  {
     compress
     dateext
     maxage 30
     rotate 10
     missingok
     notifempty
     size +4096k
     su news news
     create 640 news news
     sharedscripts
     postrotate
         /usr/bin/systemctl reload syslog.service > /dev/null
     endscript
}



--
Cheers, Carlos.
ES🇪🇸, EU🇪🇺;

--- SoupGate-Win32 v1.05
 * Origin: you cannot sedate... all the things you hate (1:229/2)

<< oldest | < older | list | newer > | newest >> ]


(c) 1994,  bbs@darkrealms.ca