83

Since the man page doesn't answer my question and I don't want to force a rotation cycle, I decided to ask the question here.

The man page for logrotate gives the following example:

   "/var/log/httpd/access.log" /var/log/httpd/error.log {
       rotate 5
       mail www@my.org
       size 100k
       sharedscripts
       postrotate
           /usr/bin/killall -HUP httpd
       endscript
   }

All examples with wildcards contain only a single entry. Now, what I'm interested in is whether this one is also allowed:

   /var/log/httpd/*.log /var/log/httpd/*/*.log {
       # ... same as above
   }

Here's the reasoning: I have multiple vhosts and I split them up by the user that "owns" those vhosts. Since the log files are world-readable, I want to bind-mount a folder into the user home directory, but limit it to the log files that the user "owns", which is easiest achieved by separating the logs into folders (and bind-mounting requires that scheme anyway). So I'm looking for a solution to rotate both the log files under /var/log/httpd as well as all log files under subdirectories of that directory - without having to list each and every subdirectory by name.

In general the man page gives no clue whether multiple entries are at all possible for wildcard rules or only for full paths. I'm using logrotate version 3.7.8-6 which comes with Debian "Squeeze", but I reckon this is not necessarily specific to a distro or program version.

119

Yes, you can use multiple wild cards. You can test your file without performing the actual rotations by doing this:

logrotate -d -f /etc/logrotate.conf
  • -d = Turns on debug mode. In debug mode, no changes will be made to the logs or to the logrotate state file.

  • -f = Tells logrotate to force the rotation, even if it doesn’t think this is necessary. Sometimes this is useful after adding new entries to logrotate, or if old log files have been removed by hand, as the new files will be created, and logging will con- tinue correctly.`

  • 3
    thanks a lot! Just tried and it works. It appears from the output that the wildcards can be expected to work as they do in the shell. – 0xC0000022L Mar 10 '11 at 23:01
24

I just wanted to clarify, because that's what I got here looking how to do,

Multiple log files are allowed to be specified for a single config, eg

/var/log/httpd/access.log
/var/log/httpd/error.log
/var/log/httpd/mysite/*.log
{
    rotate 5
    mail nobody@example.org
    size 100k
    sharedscripts
    postrotate
        /usr/bin/killall -HUP httpd
    endscript
}
  • // , Is there not a problem with the different paths occurring on multiple lines? – Nathan Basanese Jul 11 '17 at 15:16
  • @NathanBasanese I don't understand your question fully, I think you can point the path lines at files anywhere on disk you like, they dont all have to be in the same directory prefix. – ThorSummoner Jul 11 '17 at 17:09
  • @NathanBasanese oh, I think I understand, having multiple log rotation targets on different lines appears to be a normal use, i copied that form from other logrotate.d scripts, for example /etc/logrotate.d/rsyslog – ThorSummoner Dec 25 '18 at 21:56
4

From man page for logrotate:

Note that log file names may be enclosed in quotes (and that quotes are required if the name contains spaces). Normal shell quoting rules apply, with ', ", and \ characters supported.

Please remember to modify or remove quotation marks when going from single to multiple patterns:

This works:

/var/log/*.log /var/log/*.blog {

this works too:

/var/log/*.log
/var/log/*.blog {

This does not work:

'/var/log/*.log /var/log/*.blog' {

and neither this:

"/var/log/*.log /var/log/*.blog" {

Compare with the single pattern case.

This works:

'/var/log/*.log' {

and this works too:

"/var/log/*.log" {

Tested with logrotate 3.10.0

  • 2
    Would be interesting to know if this works: "/var/space /log/*.log" "/var/log/*.blog" – KajMagnus Mar 23 '18 at 8:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.