RE: [cobalt-security] Need some help on "spam" report

[Mailing Lists <mlists@xxxxxxxxxx>]

> Matthew,
>
> I do indeed have that file on my Qube 3. So I assume if I take out the
> "weekly" under the rotate logfiles weekly that would do it ? Or can I change
> it to "monthly" ? And does this change take affect when the file is saved ?

The weekly line indicates how often to rotate. I would leave it alone.

> Here is how it shows:
>
> # rotate log files weekly
> weekly
>
> # keep 4 weeks worth of backlogs
> rotate 4

This is all I changed on mine, the amount of backlogs. Since I have plenty 
disk space and a lightly loaded server, I just put in
rotate 9999
I also have compression enabled, I don't recall if that was on by default 
or not. I know one thing for sure, on a RaQ4 I once maintained, /var was a 
separate small partition. You can cause major problems if the Qube uses 
this scheme, and /var fills up with logs.

From the command line execute
df -h
to see how your disk usage is right now. If you increase the backlog rate 
at all, keep a close eye on disk usage over the coming months to make sure 
it doesn't fill up. I have logwatch installed and I get a daily report on 
disk usage.


> Thanks !
>
> Chuck
>
> -----Original Message-----
> From: cobalt-security-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-security-admin@xxxxxxxxxxxxxxx] On Behalf Of Matthew Goade
> Sent: Tuesday, April 20, 2004 1:29 PM
> To: cobalt-security@xxxxxxxxxxxxxxx
> Subject: Re: [cobalt-security] Need some help on "spam" report
>
>
>
>
> If you are familiar with the command line interface, see if you have a file
> /etc/logrotate.conf (RaQ 550 does).
> It will make sense when you read the file. I changed mine to effectively
> never remove logs. I keep them all, and occasionally export them and burn
> them to a cd.
>
>
>
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security