[squid-users] squid logs not rotating

[Gary Woodman]

> Date: Mon, 20 Apr 2015 01:07:44 +1200
> From: Amos Jeffries <squid3 at treenet.co.nz>
> To: squid-users at lists.squid-cache.org
> Subject: Re: [squid-users] squid logs not rotating
> Message-ID: <5533A8A0.4090507 at treenet.co.nz>
>Content-Type: text/plain; charset=utf-8

>> the time there will not be 30 days worth of data in the logs like on T1.
>> 
>> Other logs such as cache.log and store.log suffer equally the same buildup and wipe.
>> 
>> Does anyone have any suggestions? How might we go about debugging this situation?
>
> I'd almost guarantee you the log rotation script is different on the two servers.
>
> Most systems use the OS provided log rotation service, which does the rotate atomically then
> runs squid -k rotate. squid.conf has "logfile_rotate 0" to prevent Squid touching the OS rotation
>  numbering.
>
> What you describe is classic symptoms of the OS rotating logs, but only doing the "squid -k 
> rotate" action once every month.
>
>
> HTH
> Amos

You are absolutely correct. I had moved the default squid config out of /etc/logrotate.d on both of these servers, but somehow, it had crept back on T2.

However, removing it has not affected the behaviour described previously.

I have bowed to the inevitable and followed your advice, to let the OS handle the rotation (with logfile_rotate set to zero), including the following in /etc/logrotate.d/squid:
    daily
    rotate 30


Regards
Gary


_____________________________________________________________
This email (including any attached files) is confidential and is for the intended recipient(s) only. If you received this email by mistake, please, as a courtesy, tell the sender, then delete this email.

The views and opinions are the originator's and do not necessarily reflect those of the University of Southern Queensland. Although all reasonable precautions were taken to ensure that this email contained no viruses at the time it was sent we accept no liability for any losses arising from its receipt.

The University of Southern Queensland is a registered provider of education with the Australian Government.
(CRICOS Institution Code QLD 00244B / NSW 02225M, TEQSA PRV12081 )