Skip to main content
Question

Change file syslog file retention?

  • December 13, 2021
  • 3 replies
  • 27 views

chafe
Forum|alt.badge.img+4

Hello everyone,

Is there a way to change the retention policy in terms of some of the log files or even files in general? I did my research and from what i can see its stored at "/etc/asl.conf" where from there a line indicates the below.

 

# Rules for /var/log/system.log
> system.log mode=0640 format=bsd rotate=seq compress file_max=5M all_max=50M

How have you all gone about editing this to include ttl=etc I want to make this change due to the CIS suggestion in Jamf Protect. What do you all think? 

3 replies

chafe
Forum|alt.badge.img+4
  • Author
  • Contributor
  • December 13, 2021

This change would have to be org wide so i am trying to avoid manually changing each file per computer since it only affects 1 machine at a time. 


Forum|alt.badge.img
  • New Contributor
  • December 14, 2021

Maintaining Linux system log files in a proper manner that helps the administration of the system. In this article, you will learn how to set the Linux system log rotation using logrotate command that can be an application log or system logs. Log files grow day by day and it will be continuing the same log files for a long time, by default newly installed Linux system already have standard rotation policy but it is only for system further application log files store as per instructions of that particular application program.

 

Upsers

 


chafe
Forum|alt.badge.img+4
  • Author
  • Contributor
  • December 14, 2021

Maintaining Linux system log files in a proper manner that helps the administration of the system. In this article, you will learn how to set the Linux system log rotation using logrotate command that can be an application log or system logs. Log files grow day by day and it will be continuing the same log files for a long time, by default newly installed Linux system already have standard rotation policy but it is only for system further application log files store as per instructions of that particular application program.

 

Upsers

 


Its for Mac? And what article are you talking about?