Syslog rotation in oracle db

Hi,
we are feeding syslogs from devices accross our network into oracle db
we have a SAN mounted on solaris, it has 5 partitions
-2 slow db RAID 5, 1000 gb each
-2 fast db RAID 0, 500 gb each
-1 for plain syslog files 1 gb
I have to keep syslog data in RAID0 for 7 days, then move it on RAID5, it will be on RAID5 for 30 days, then after 30 days will remove this data
means we will keep records for 30 days. can u suggest some pl/sql stuff for this massive data import/export ? i mean moving data from raid0 to raid5 and fast delete operations for GBs of data from RAID0 and RAID5
Thanks,
-Manish

Do you have two Oracle DB?
If yes consider Transportable Tablespaces, If it is one DB, I assume that you have two tables
one which is located in datafiles located on RAID0 i.e table FAST_TABLE and one on RAID5
i.e table SLOW_TABLE. You can try to do it in plain sql using direct Path INSERT.
insert /*+ append */into slow_table nologging select * from fast_table nologging
than you can truncate table fast_table;
Best Regards
Krystian Zieja / mob

Similar Messages

Trying to configure syslog process, for Oracle auditing, Oracle 10gR2

Folks,
I am trying to use the OS (UNix Sun Solaris 10), syslog process. So I can write my Oracle db 10gR2 audit logs to a location, where Oracle userid on unix cannot modify/delete.
For that I have set following values in the Oracle 10gR2 parameters :
audit_file_dest string /flood/u01/app/oracle/product/
10.2.0/db_1/rdbms/audit
audit_sys_operations boolean TRUE
audit_syslog_level string USER
audit_trail string OS
Actually I have set audit_syslog_level = 'user.notice' value in the database
Also made following entry in the syslog.conf file
## oracle audit records
user.notice /var/log/oraaudit.log
# if a non-loghost machine chooses to have authentication messages
# sent to the loghost machine, un-comment out the following line:
#auth.notice ifdef(`LOGHOST', /var/log/authlog, @loghost)
mail.debug ifdef(`LOGHOST', /var/log/syslog, @loghost)
# non-loghost machines will use the following lines to cause "user"
# log messages to be logged locally.
ifdef(`LOGHOST', ,
user.err /dev/sysmsg
user.err /var/adm/messages
user.alert `root, operator'
user.emerg *
It is still not logging the audit logs in that location.
What am I missing here
Thanks for your help.
Ashish

By chance did you restart the database and syslogd? ( I think that a "kill -1 syslogd" will work for that.)
Your configuration looks very similar to what I did - and mine is working ok. One difference I noticed: when I do the "show parameter audit", I get the whole string of "audit_syslog_level string LOCAL5.NOTICE"
Greg

Login attempts with wrong /expired password..Security

Hi,
I need to know dictionary view , which tells which user is trying to login with wrong password.
Actually login history for oracle user account.
please tell procedure or configurations for this.
Thanks in advance.
Aj

This is a correct method for OLD versions
See correct value for AUDIT_TRAIL in 10g : http://download.oracle.com/docs/cd/B19306_01/server.102/b14237/initparams016.htm#REFRN10006
From a security point of view, the best is to audit into OS (syslog : http://download.oracle.com/docs/cd/B19306_01/network.102/b14266/auditing.htm#sthref1168)
From a day-by-day point of view, the simplier is to audit into DB (SYS.AU$)
Thoses parameters are not dynamic but you've to modify thoses in spfile, as Oracle recommand using spifile instead of pfile.
svrmgrl no longer exist, you have to do this in sqlplus.

Silverlight fills up system.log file

In order to watch the NBC Olympics, I had to install Silverlight. I had hesitation and now know why. While the player seems to play just fine and all, it is kicking massive error messages to the system.log file. It fills many megabytes and therefore the daily syslog rotation runs bzip2 for a long time each night.
Here is a sampling from my system.log file, using Safari 4.0.4 on OS-X 10.6.2.
Feb 22 01:33:28 KR-iMac com.apple.WebKit.PluginAgent[593]: * set a breakpoint in mallocerrorbreak to debug
Feb 22 01:33:28 KR-iMac WebKitPluginHost[1002]: WebKitPluginHost(1002,0xb071b000) malloc: * error for object 0x1980bf94: pointer being freed was not allocated\n* set a breakpoint in mallocerrorbreak to debug
Feb 22 01:33:28 KR-iMac WebKitPluginHost[1002]: WebKitPluginHost(1002,0xb071b000) malloc: * error for object 0x5ef8e14: pointer being freed was not allocated\n* set a breakpoint in mallocerrorbreak to debug
Feb 22 01:33:28 KR-iMac com.apple.WebKit.PluginAgent[593]: WebKitPluginHost(1002,0xb071b000) malloc: * error for object 0x1980bf94: pointer being freed was not allocated
Feb 22 01:33:28 KR-iMac com.apple.WebKit.PluginAgent[593]: * set a breakpoint in mallocerrorbreak to debug
Feb 22 01:33:28 KR-iMac com.apple.WebKit.PluginAgent[593]: WebKitPluginHost(1002,0xb071b000) malloc: * error for object 0x5ef8e14: pointer being freed was not allocated
Feb 22 01:33:28 KR-iMac com.apple.WebKit.PluginAgent[593]: * set a breakpoint in mallocerrorbreak to debug
Feb 22 01:33:28 KR-iMac com.apple.WebKit.PluginAgent[593]: * process 593 exceeded 500 log message per second limit - remaining messages this second discarded *
Feb 22 01:33:28 KR-iMac WebKitPluginHost[1002]: WebKitPluginHost(1002,0xb071b000) malloc: * error for object 0x1980bf94: pointer being freed was not allocated\n* set a breakpoint in mallocerrorbreak to debug
Feb 22 01:33:28 KR-iMac WebKitPluginHost[1002]: WebKitPluginHost(1002,0xb071b000) malloc: * error for object 0x5ef8e14: pointer being freed was not allocated\n* set a breakpoint in mallocerrorbreak to debug
Notice it exceeds over 500 messages a second. Anyway to mute these messages???

The problem with just deleting the file, is two fold.
First, the system needs this file to continue to post system messages. If you delete it, or just trash it, the system will just continue to add to the trashed file using the open file pointers, or simply create a new one.
Second, Silverlight will continue to generate messages, and ultimately still go into the system.log. Deleting the file is not such a good idea while the operating system is still using it.
I recommend doing the following to clear the file without deleting it:
You'll need to Enable the root user on your computer if you haven't yet. Search other threads for how to do this on your version of OS-X.
In Terminal, log in as root.
username$ sudo -i
Change to the /var/log folder.
root# cd /var/log
Use the truncate function to simply zero out the file.
root# >system.log
You'll need to do this everyday, after running Silverlight, hopefully BEFORE the daily log rotating cron scripts try to rotate the logs and perform a bzip compression of the file (which will tax your system for a few hours). You may want to find any log files ending in .bz2 and remove those. You can delete those, as they are just archives of old system log files and are not used any more.

OC4J instance crashing after Ping Failed: default_group~home~default_group~

Hi All,
I have noticed from opmn logs that [pm-process] Process Crashes and System has been restarted automatically by itself.
I have read the tread with title "OC4J instance crashing - can't find any diagnostics " and I have configured the opmn.xml file in order to enable opmn.dbg logs.
In the meantime I have suspected that the BPEL crashes are the same date with default_group~home~default_group logs rotation.
[oracle@csporacle1 logs] cat /etc/redhat-release
Red Hat Enterprise Linux ES release 4 (Nahant Update 5)
[oracle@csporacle1 logs] cat opmn.log | grep "Restarting"
10/05/06 17:10:18 [pm-process] Process Crashed: default_group~home~default_group~1 (481247799:27664) - Restarting
10/07/08 03:38:12 [pm-process] Process Crashed: default_group~home~default_group~1 (481247801:12964) - Restarting
10/08/05 15:01:08 [pm-process] Process Crashed: default_group~home~default_group~1 (481247802:22304) - Restarting
10/09/10 04:19:56 [pm-process] Process Crashed: default_group~home~default_group~1 (481247803:5081) - Restarting
10/10/15 00:04:21 [pm-process] Process Crashed: default_group~home~default_group~1 (481247804:7275) - Restarting
10/11/20 14:56:29 [pm-process] Process Crashed: default_group~home~default_group~1 (481247806:28469) - Restarting
10/12/25 11:15:39 [pm-process] Process Crashed: default_group~home~default_group~1 (481247807:17717) - Restarting
11/02/02 22:09:16 [pm-process] Process Crashed: default_group~home~default_group~1 (481247808:540) - Restarting
11/02/26 12:14:55 [pm-process] Process Crashed: default_group~home~default_group~1 (481247809:26490) - Restarting
11/03/12 04:28:19 [pm-process] Process Crashed: default_group~home~default_group~1 (481247812:7348) - Restarting
11/04/25 05:43:59 [pm-process] Process Crashed: default_group~home~default_group~1 (481247817:9090) - Restarting
11/05/21 08:27:55 [pm-process] Process Crashed: default_group~home~default_group~1 (481247818:26304) - Restarting
11/06/18 08:04:03 [pm-process] Process Crashed: default_group~home~default_group~1 (481247826:28958) - Restarting
11/07/12 19:04:46 [pm-process] Process Crashed: default_group~home~default_group~1 (481247828:10867) - Restarting
11/08/21 14:33:08 [pm-process] Process Crashed: default_group~home~default_group~1 (481247832:13556) - Restarting
11/09/18 20:40:16 [pm-process] Process Crashed: default_group~home~default_group~1 (481247835:22024) - Restarting
11/10/17 13:56:47 [pm-process] Process Crashed: default_group~home~default_group~1 (481247838:20504) - Restarting
[oracle@csporacle1 logs] ls -lrt
total 6020344
-rw-r--r-- 1 oracle dba          0 Feb 17 2010 opmn.out
-rw-r--r-- 1 oracle dba   84895911 Feb 2 2011 default_group~home~default_group~1.log.11-02-02_22:09:16.gz
-rw-r--r-- 1 oracle dba   83151884 Feb 26 2011 default_group~home~default_group~1.log.11-02-26_12:14:55.gz
-rw-r--r-- 1 oracle dba   79803990 Mar 12 2011 default_group~home~default_group~1.log.11-03-12_04:28:19.gz
-rw-r--r-- 1 oracle dba   66470738 Mar 29 2011 default_group~home~default_group~1.log.11-03-29_00:17:05.gz
-rw-r--r-- 1 oracle dba   84542865 Apr 25 2011 default_group~home~default_group~1.log.11-04-25_05:43:59.gz
-rw-r--r-- 1 oracle dba   83672948 May 21 08:27 default_group~home~default_group~1.log.11-05-21_08:27:55.gz
-rw-r--r-- 1 oracle dba   84825282 Jun 18 08:04 default_group~home~default_group~1.log.11-06-18_08:04:03.gz
-rw-r--r-- 1 oracle dba   86740423 Jul 12 19:04 default_group~home~default_group~1.log.11-07-12_19:04:46.gz
-rw-r--r-- 1 oracle dba   66921060 Aug 3 23:06 default_group~home~default_group~1.log.11-08-04_02:28:06.gz
-rw-r--r-- 1 oracle dba   71221025 Aug 21 14:33 default_group~home~default_group~1.log.11-08-21_14:33:08.gz
-rw-r--r-- 1 oracle dba 2147483647 Sep 18 20:39 default_group~home~default_group~1.log.11-09-18_20:40:16
-rw-r--r-- 1 oracle dba 2147483647 Oct 17 13:56 default_group~home~default_group~1.log.11-10-17_13:56:49
drwxr-x--- 2 oracle dba       4096 Oct 24 00:11 states
-rw-r--r-- 1 oracle dba      64203 Oct 24 20:09 opmn.log
-rw-r--r-- 1 oracle dba 976001440 Oct 28 02:35 default_group~home~default_group~1.log
-rw-r--r-- 1 oracle dba   95431960 Oct 28 02:36 opmn.dbg
[oracle@csporacle1 logs] After this I have check the opmn.xml and found that the ORACLE_HOME has been set to other oracle on the same Unit.
oracle@csporacle1 opmn] cat conf/opmn.xml | head -20
<?xml version = '1.0' encoding = 'UTF-8'?>
<opmn xmlns="http://www.oracle.com/ias-instance">
   <log path="$ORACLE_HOME/opmn/logs/opmn.log" comp="internal;ons;pm" rotation-size="1500000"/>
   <debug path="$ORACLE_HOME/opmn/logs/opmn.dbg" comp="internal;pm;ons" rotation-size="1500000"/>
   <notification-server interface="ipv4">
      <port local="6100" remote="6200" request="6003"/>
      <ssl enabled="true" wallet-file="$ORACLE_HOME/opmn/conf/ssl.wlt/default"/>
   </notification-server>
   <process-manager>
      <process-modules>
         <module path="$ORACLE_HOME/opmn/lib/libopmnohs">
            <module-id id="OHS"/>
         </module>
         <module path="$ORACLE_HOME/opmn/lib/libopmnoc4j">
            <module-id id="OC4J"/>
         </module>
         <module path="$ORACLE_HOME/opmn/lib/libopmncustom">
            <module-id id="CUSTOM"/>
         </module>
         <module path="$ORACLE_HOME/opmn/lib/libopmniaspt">
[oracle@csporacle1 opmn] pwd
/space/u01/app/oracle/product/10.1.3.1/OracleAS_1/opmn
[oracle@csporacle1 opmn] cd $ORACLE_HOME
[oracle@csporacle1 10.1] pwd
/u01/app/oracle/product/10.1
[oracle@csporacle1 10.1] Are these error are related with my findings or are there any criteria must i check further.
Could you please help me to solve this problem.
Thanks & Best Regards,
Bahtiyar

gday mattysmith --
Unfortunately that's a very good question.
As OPMN is in the picture here, the first step may be to enable debug logging for OPMN in the chance that it may give you more information about why it thinks the process crashed.
Generally speaking, when OPMN is restarting a process, it can be because it recognized that a managed process has dissapeared (ie JVM core dumped, etc.) or it can also be because the JVM didn't respond to any of OPMNs requests to let it know it was still alive. In which case OPMN will kill then restart the managed process. This can be caused by situations where the JVM has run out of memory, etc. and becomes unresponsive, leading to it eventually being detected as such and restarted.
What you can do is to add the OPMN PM submodule to the OPMN debug logger.
<opmn xmlns="http://www.oracle.com/ias-instance">
<log path="$ORACLE_HOME\opmn\logs\opmn.log" comp="internal;ons;pm" rotation-s
ize="1500000"/>
<debug path="$ORACLE_HOME\opmn\logs\opmn.dbg" comp="internal;pm;ons" rotation-size="1500000"/>
</opmn>
That should then produce an opmn.dbg file in the $ORACLE_HOME/opmn/logs directory. It'll be very verbose, so you'll need to associate the restart times from the other log file to locate the relevant section of the file. Hopefully that may shed some light on what is happening, at least at the restart level.
Usually if there are runtime exceptions such as OOM errors, etc. then those are dumped to stderr/stdout. Check the contents of the other log files in the opmn/logs directory of the form default_group~home~default_group~1.log to see if there is anything obvious in there.
There has been reports of an issue with PermGen space usage -- that could be something you are running into under the covers. Try resizing the permgen space to be a little larger and see if the problem goes away -- that can be done in opmn.xml in the java > start-options section of the instance in question.
See how any of that goes!
-steve-

KIMYONG : java.lang.NoClassDefFoundError 발생시 조치사항

Purpose
JSP 호출시 아래와 같이 Internal Server Error 나 misconfiguration error error 가 발생할 경우가 있습니다.
JspServlet: unable to dispatch to requested page: java.lang.NoClassDefFoundError: oracle/apps/jtf/base/syslog/LogFormat
at oracle.apps.jtf.base.Logger.<clinit>(Logger.java:89)
"jserv.log" [readonly] 919L, 59335C
at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:310)
Cause
Apache 가 위 class들을 access하지 못할때 발생합니다.
Fix
이전 apps.zip은 Oracle 11i java class들을 모두 가지고 있습니다.
하지만 이제는 $JAVA_TOP에 모두 Exploded 된 상태로 되어 있습니다.
일단 Directory permission을 check해 주세요.
$JAVA_TOP/"oracle/apps/jtf/base/"
$ ls -l syslog
-rw--------- 1 aptyumai aatyumai 3147 Jun 25 2003 LogFormat.class
-rw--------- 1 aptyumai aatyumai 1675 Jun 25 2003 LogUtil.class
syslog , $JAVA_TOP의 permission을 755로 변경해주세요.
$chmod -R 755 syslog
$chmod -R 755 $JAVA_TOP
Reference : Note 298867.1

ADR cleaning

Hello.
I noticed that Oracle rotates and removes only xml logs, text logs in 'trace' directory like alert.log and listener.log continuously grow. Also in directory 'lck' files are not removed. All these should be rotated/removed manualy ?
And is there a way to set rotation size for xml logs?

$>adrci
adrci> show homes
adrci> set home </../.../../../>
adrci> purge -age <minutes> -traceincident
For more info:
http://docs.oracle.com/cd/B28359_01/server.111/b28319/adrci.htm
log*.xml is rotative, but oracle doesn't purge by itself, you must do it periodically. Traces, incidents, logs,.... too

Tnsping/tnsnames question

Hi everyone,
I am having some trouble reaching a DB using tnsping utility on Solaris 5.10.
I have no issue connecting to this db (db1) using other PC's, but something about this configuration is messing it up. I should mention that there are currently 4 oracle installs on this machine, 9.2.0.8, 10.2.0.3, 10.2.0.4, and 11g (the most recent install).
It seems from the below that since the 11g install, tnsping & sqlplus are trying to use the 11g files, so I updated the tnsnames and sqlnet files.
here is the feedback from tnsping:
tnsping db1Used parameter files:
/opt/oracle/product/11g/11.1.0.6/network/admin/sqlnet.ora
TNS-03505: Failed to resolve name
sqlnet.ora
/admin$ pwd/opt/oracle/product/11g/11.1.0.6/network/admin
/admin$ cat sqlnet.ora# sqlnet.ora Network Configuration File: c:\apps\oracle\client\10.2.0\network\admin\sqlnet.ora
# Generated by Oracle configuration tools.
# This file is actually generated by netca. But if customers choose to
# install "Software Only", this file wont exist and without the native
# authentication, they will not be able to connect to the database on NT.
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT, LDAP)
tnsnames.ora
/admin$ cat tnsnames.ora# tnsnames.ora Network Configuration File: /opt/oracle/product/11g/11.1.0.6/network/admin/tnsnames.ora
# Generated by Oracle configuration tools.
LISTENER_aduh12 =
(ADDRESS = (PROTOCOL = TCP)(Host = fyr21.us.xyz.com)(Port = 1524))
db1 =
(DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP) (HOST = au101.ips.xyz.com)(PORT = 1521))
    (CONNECT_DATA =
      (SID = db1)
aduh12 =
(DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(Host = bsel71.us.xyz.com)(Port = 1524))
    (CONNECT_DATA =
      (SERVER = DEDICATED)
      (SERVICE_NAME = aduh12.us.xyz.com)
)Any ideas why this does not work as expected? Any help would be appreciated. Thanks!

That's right :)
This machine does run several instances, but db1 is a remote service. I can tnsping from my windows laptop without trouble:
D:\Users\a275tet\My Documents\Rotation 4\Oracle\PERL>tnsping db1
TNS Ping Utility for 32-bit Windows: Version 10.2.0.1.0 - Production on 05-AUG-2
008 15:13:09
Copyright (c) 1997, 2005, Oracle. All rights reserved.
Used parameter files:
D:\oracle\product\10.2.0\db_3\network\admin\sqlnet.ora
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = au101.ips.xyz.com)(PORT = 1521)) (CONNECT_DATA = (SID = db1)))
OK (220 msec)
I am trying to run some scripts on this server which will reach out and interface with the db1 database. They run fine on my local pc, but something is mixed up with the tns file on this server, even though I copied the same entry from my local tns file.

How to send syslog to Oracle database?

Is it possible to directly pipe syslog entries to the database?

You can load external data to Oracle database... for instance a txt file...
External tables allow you to query data that is stored outside the database in flat files. You can't do DML on external tables but they can be used for query, join and sort operations directly or by using views or synonyms
CREATE DIRECTORY MYEXT_TAB_DIR AS '/path_to_my_file';
CREATE TABLE syslog
(mydata varchar2(1000))
ORGANIZATION EXTERNAL
(TYPE ORACLE_LOADER DEFAULT DIRECTORY MYEXT_TAB_DIR ACCESS PARAMETERS
RECORDS DELIMITED BY NEWLINE FIELDS TERMINATED BY ';'
LOCATION ('mysyslogfile.txt')
PARALLEL 5
REJECT LIMIT 200;
SELECT * FROM syslog;
Regards,
Joao Oliveira
http://beyondoracle.wordpress.com

Send mail with rotating info from oracle express

Hi all,
Today someone asked me if it is possible to send a mail from oracle express(so far no problem)
to all users(also no problem), with rotating advertisements on the side and bottom of the mail.
Anybody any idea how to approach this.
thanx,
Pim

You mean to add in a gif file or something of that nature? It would be an animated gif, but it is possible to do that.
Thank you,
Tony Miller
Webster, TX

How to - write oracle logs to syslog

Is there a method for writing some/all of the logs produced by oracle in syslog format? In the
SANS oracle security class it was suggested to write oracle logs using syslog on unix systems.
I am running 10g on RedHat.
Has anyone done this before? Any pointers to reference material? My google search for
variations of - syslog oracle unix logs was not helpful.
thanks
THeresa

Is there a method for writing some/all of the logs produced by oracle in syslog format?What type of logs do you mean?
Maybe following link will help you (Documentation - New Features):
http://download-uk.oracle.com/docs/cd/B19306_01/network.102/b14266/whatsnew.htm#sthref34
This is example if you want put all messages from alert log to syslog.
You could use "logger" command for this purpose.
For example create startup script (in /etc/init.d/ directory) which will execute (as root) following command:
tail -f /path/to/oracle/bdump/alert_<SID>.log | logger &Now all actions will be logged in alert log and also in system logs.
This example has at least one disadvantage:
If you remove alert log tail will loose the pointer for file - no new messages in system logs.
For more info execute "man logger" from shell.

Oracle 11.x log to remote syslog

Hello,
We are running Oracle 11.2.x DB on Solaris platform. Looking for a way to see if I can send alert log and listener log to a remote syslog server?
I know there are some other methods like Epilog and some other scripts that could be used, but wondering if there is a "built-in" method to accomplish this?
Thank you,

I am reasonably certain that there is no way to do this with standard DB facilities (that parameter Sybrand refers to is not relevant).
You can write your own pl/sql routines: perhaps a scheduled job that queries v$diag_alert_ext. Or you could go the external table route to read the logs. But almost certainly, I think you need to rely on external utilities to do this.
Edited by: JohnWatson on Apr 3, 2013 5:30 PM
And I should have added: you could of course buy the Audit Vault. But that is a non-trivial installation.

Tip: Rotate Oracle-XE logs in Ubuntu

Hi,
You can find guide here
http://ubuntuforums.org/showthread.php?t=1230206&highlight=oracle
Br, Jari

Hi, Vishnu,
I'd like to know the details of rotating these logs. My impression is that you either completely disable OC4J logging or can't do anything about it.
Yong Huang

CFMX7 with syslog, or log collection/rotation

The end goal is to collect logs from all 5 production
ColdFusion boxes in one place, rotated daily, so we can analyze it
without hopping between servers. To that end I'm wondering whether
anyone has gotten logging against syslog to work in the wild. This
is the way I've done these things for other software packages, so
it's naturally the first thing that comes to mind. However, If
there is some other way to accomplish this that does not involve
collecting the data in one place with syslog, let me know. I'm at
the point where I'm thinking about rolling up scripts to do this
but it seems common enough an interest that someone might have
already accomplished it.
Failing that, if anyone knows best practice for getting a
typical log rotater working against the ColdFusion logs, that would
also be helpful. I'd like logs rotated by date, not by size, unless
logs for one day go over the file size limit. We're running CFMX7
on Red Hat Enterprise Linux.
I've looked in the knowledge base and searched the web and
this forum, but beyond a statement in the docs that you can send
some messages to syslog there's no further information. The
definition of "some", and some knowledge of what facility ID you
need to use with syslog to collect the data, is not to be
found.

The end goal is to collect logs from all 5 production
ColdFusion boxes in one place, rotated daily, so we can analyze it
without hopping between servers. To that end I'm wondering whether
anyone has gotten logging against syslog to work in the wild. This
is the way I've done these things for other software packages, so
it's naturally the first thing that comes to mind. However, If
there is some other way to accomplish this that does not involve
collecting the data in one place with syslog, let me know. I'm at
the point where I'm thinking about rolling up scripts to do this
but it seems common enough an interest that someone might have
already accomplished it.
Failing that, if anyone knows best practice for getting a
typical log rotater working against the ColdFusion logs, that would
also be helpful. I'd like logs rotated by date, not by size, unless
logs for one day go over the file size limit. We're running CFMX7
on Red Hat Enterprise Linux.
I've looked in the knowledge base and searched the web and
this forum, but beyond a statement in the docs that you can send
some messages to syslog there's no further information. The
definition of "some", and some knowledge of what facility ID you
need to use with syslog to collect the data, is not to be
found.

Syslog Log Rotation

Dear,
Just to understand syslog log rotation. I have configured syslog_info file for log rotation and size i have give is 100mb with 0 no of backups. I have scheduled it to run every week with a backup path. Basically i dont want any backups and i want the syslog_info to be overwritten when it reaches 100mb, are my setting correct?
thanks,
aamir

yes that is right,
you can see it also explained in the logrot document
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_common_services_software/3.1.1/user/guide/admin.html#wp645704
Step 5 Specify the number of archive revisions. If you do not want to keep any archives, enter 0 (the default) for this option.
hope this is what you are looking for.

Syslog rotation in oracle db

Similar Messages

Maybe you are looking for