Increase logging size file

[Ethernaut]

Hi Guys,

Is posible increase size of logrotate?

-rw-r----- 1 root adm 203549 Dec 8 23:47 messages
-rw-r----- 1 root adm 262569 Dec 8 23:47 messages.1
-rw-r----- 1 root adm 262827 Dec 8 23:46 messages.2
-rw-r----- 1 root adm 262548 Dec 8 23:45 messages.3
-rw-r----- 1 root adm 262914 Dec 8 23:45 messages.4
-rw-r----- 1 root adm 262848 Dec 8 23:44 messages.5
-rw-r----- 1 root adm 262678 Dec 8 23:43 messages.6

I have this message every 2 min

tail: ‘/var/log/messages’ has been replaced; following new file
tail: ‘/var/log/messages’ has been replaced; following new file
tail: ‘/var/log/messages’ has been replaced; following new file
tail: ‘/var/log/messages’ has been replaced; following new file

I find this file rsyslog

/var/log/syslog
/var/log/mail.log
/var/log/kern.log
/var/log/user.log
/var/log/cron.log
{
rotate 4
weekly
missingok
notifempty
compress
delaycompress
sharedscripts
postrotate
/usr/lib/rsyslog/rsyslog-rotate
endscript
}

Thanks

[c-po]

If your log is rotated every two minutes this is kinda odd. Looks like something is spamming your system?

[Ethernaut]

Hi,

There is no spam; I enabled logging on all my rules because I need that information for export to an analysis tool.

[c-po]

What would be your desired rotation size?

[Ethernaut]

50M, is possible expand or configure this parameter and persist after reboot ?

[Ethernaut]

I reduced my log in ACL rules, and the log files don’t rotate as quickly. With many ACL rules, more CPU is used