Tag Info

New answers tagged

2

So the issue is your syslog process still has the deleted file open. You need to restart your syslog process. By default that is rsyslog in centos service rsyslog restart I'm sure you can see it opened as deleted also if you try something like lsof | grep '/var/log/secure' That will give you the pid/process name of what is holding it open. For ...


2

As per comment elsewhere, apache (in most configurations) starts as root - and root can write anywhere. Allowing the directory to be writeable by the User configured for the webservr is potentially a security hole. Read access should be limited to people who need to read te logs. "ownership" is merely a tool for implementing the specifics of the policy.


0

You can try MCollective http://puppetlabs.com/mcollective The description for its website is: The Marionette Collective AKA MCollective is a framework to build server orchestration or parallel job execution systems. Primarily we’ll use it as a means of programmatic execution of Systems Administration actions on clusters of servers. In this regard we ...


1

I use GNU Parallel for that kind of tasks. echo "fgrep -Rl <MyQuery> /var/log/" | parallel --onall --slf servers.txt


3

No it is not safe to simply delete log files to free space. They are critical to the functionality of Exchange. You can use an Exchange aware backup solution that can truncate the logs (delete them) once a backup is completed. Another option is to use circular logging (But will remove recoverability of data if you do not have a backup solution). This is ...


0

The partial fix for this is to anchor your search. check file messages with path /var/log/messages ignore match ".*monit" if match "trying to execute job" then alert Or maybe polish your Regex or search a better or more representative string. Can you add application logs that can present fault conditions more clearly? You're basically searching ...



Top 50 recent answers are included