Date: Wed, 13 Aug 2008 15:07:57 -0400 From: "Brie Gordon" <brie.gordon@gmail.com> To: "Bill Moran" <wmoran@potentialtech.com>, freebsd-questions@freebsd.org Subject: Re: Lots of accounting data Message-ID: <e0dd7f6c0808131207sbc2f2dbs92167ffb21459a59@mail.gmail.com> In-Reply-To: <20080813190356.GY71785@hal.rescomp.berkeley.edu> References: <20080813184603.GA25990@hal.rescomp.berkeley.edu> <20080813145945.80d08986.wmoran@potentialtech.com> <20080813190356.GY71785@hal.rescomp.berkeley.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Aug 13, 2008 at 3:03 PM, Christopher Cowart <ccowart@rescomp.berkeley.edu> wrote: > Bill Moran wrote: >> In response to Christopher Cowart <ccowart@rescomp.berkeley.edu>: >>> I only really see two options, neither of which I particularly like: >>> * Throw more disk at the problem (but given what I've seen, I don't >>> like the odds that within a month or two, I'll realize I didn't give >>> it enough). >>> * Turn off accounting on these boxes. >> >> * Rotate and compress more frequently; and store less history? > > The compressed history amounts to nothing in comparison (1.5GB per file > as opposed to 17GB). I suppose I could configure our hourly logrotate to > replace the functionality of /etc/periodic/daily/310.accounting. Sounds > like a viable solution to me. > > Thanks, > > -- > Chris Cowart > Network Technical Lead > Network & Infrastructure Services, RSSP-IT > UC Berkeley > Could you dedicate a server to holding logs? (In addition to the compression?) -- Regards, Brie A. Gordon A Linux Chica http://granite.sru.edu/~bag6849/index.html
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?e0dd7f6c0808131207sbc2f2dbs92167ffb21459a59>