Posted on 12-13-2021 09:50 AM
Hello everyone,
Is there a way to change the retention policy in terms of some of the log files or even files in general? I did my research and from what i can see its stored at "/etc/asl.conf" where from there a line indicates the below.
# Rules for /var/log/system.log
> system.log mode=0640 format=bsd rotate=seq compress file_max=5M all_max=50M
How have you all gone about editing this to include ttl=etc I want to make this change due to the CIS suggestion in Jamf Protect. What do you all think?
Posted on 12-13-2021 09:51 AM
This change would have to be org wide so i am trying to avoid manually changing each file per computer since it only affects 1 machine at a time.
12-13-2021 09:36 PM - edited 12-15-2021 12:56 AM
Maintaining Linux system log files in a proper manner that helps the administration of the system. In this article, you will learn how to set the Linux system log rotation using logrotate command that can be an application log or system logs. Log files grow day by day and it will be continuing the same log files for a long time, by default newly installed Linux system already have standard rotation policy but it is only for system further application log files store as per instructions of that particular application program.
Posted on 12-14-2021 01:11 PM
Its for Mac? And what article are you talking about?