Date: Thu, 9 Aug 2018 12:01:38 +0200 From: Ruben <mail@osfux.nl> To: freebsd-questions@freebsd.org Subject: Re: newsyslogd / pflogd : daily logfiles for pf Message-ID: <bbd6e671-4be9-af2e-314e-e1e05644f267@osfux.nl> In-Reply-To: <58b3ce35-9426-6f00-885f-2dc7fa677ba5@osfux.nl> References: <eccc8de1-c418-d564-b75e-21e9b385fdac@osfux.nl> <58b3ce35-9426-6f00-885f-2dc7fa677ba5@osfux.nl>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi, Somebody contacted me off-list and provided a lot of knowledge / efforts troubleshooting this issue: TnX! The problem eventually turned out to be (totally) unrelated to both newsylog and pflogd, and the issue has been "solved". Kind regards, Ruben On 08/01/2018 12:34 PM, Ruben wrote: > Hi, > > Anybody out there with a working rotation on /var/log/pflog (using > newsyslog) ? > > All help/suggestions welcome! > > Kind regards, > > Ruben > > On 07/30/2018 05:12 PM, Ruben wrote: >> >> Hi List, >> >> >> I'm running PF on some FreeBSD 11.x installs and I would very much >> like to have daily logfiles containing the entries that land up in the >> pflog device. I'm having trouble switching from "max size" rotation to >> "once a day, regardless of size" rotation. >> >> >> >> My pflog entry in /etc/newsyslog.conf looked like this: >> >> /var/log/pflog 600 3 100 @T00 JB /var/run/pflogd.pid >> >> >> and after my attempted change now looks like this: >> >> /var/log/pflog 600 30 * @T00 JB /var/run/pflogd.pid >> >> >> but no new /var/log/pflog.0.bz2 files are created anymore. If I run >> the newsyslog binary manually like this : >> >> /usr/sbin/newsyslog -vCF >> >> then the /var/log/pflog.* are created / rotated. >> >> >> Could somebody perhaps shed some light on what I'm doing wrong here? >> >> >> Any help appreciated! >> >> >> Kind regards, >> >> >> Ruben >> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> https://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to >> "freebsd-questions-unsubscribe@freebsd.org" > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bbd6e671-4be9-af2e-314e-e1e05644f267>