From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tapani Tarvainen To: development@lists.ipfire.org Subject: Re: Logwatch (randomly) skipping days => Feature!? Date: Sun, 17 Feb 2019 12:38:03 +0200 Message-ID: <20190217103803.GA23128@tarvainen.info> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============7457574400652894529==" List-Id: --===============7457574400652894529== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi, 1. Confirmed. Seems to happen randomly about twice a month or so. 2. My first guess of the cause is that as logwatch runs at the same time as logrotate it causes a race condition: # fcrontab -l|grep log 2019-02-17 12:32:01 INFO listing root's fcrontab 01 * * * * /usr/sbin/logrotate /etc/logrotate.conf 01 0 * * * /usr/local/bin/logwatch > /var/log/logwatch/`date -I -d yeste= rday`; \ LOGWATCH_KEEP=3D$(sed -ne 's/^LOGWATCH_KEEP=3D\([0-9]\+\)$/\1= /p' /var/ipfire/logging/settings); \ find /var/log/logwatch/ -ctime +${LOGWATCH_KEEP=3D56} -exec r= m -f '{}' ';' Try changing the minute value in logwatch to 02 or maybe 03 to be on the safe= side. Incidentally, why is logrotate being run every hour? Wouldn't daily be enough? Tapani On Sun, Feb 17, 2019 at 10:22:26AM +0100, Matthias Fischer (matthias.fischer(= a)ipfire.org) wrote: >=20 > Hi, >=20 > I discovered something weird: >=20 > >From time to time 'logwatch' does not create a daily log. >=20 > E.g.: > The file '/var/log/logwatch/2019-14-26' exists, but size =3D 0 Bytes. >=20 > The same happened yesterday with '/var/log/logwatch/2019-02-16': > 0 Bytes. >=20 > After running... >=20 > /usr/local/bin/logwatch > /var/log/logwatch/`date -I -d yesterday`; \ > LOGWATCH_KEEP=3D$(sed -ne 's/^LOGWATCH_KEEP=3D\([0-9]\+\)$/\1/p' > /var/ipfire/logging/settings); \ > find /var/log/logwatch/ -ctime +${LOGWATCH_KEEP=3D56} -exec rm -f '{}' ';' >=20 > ...manually from console, file was created, everything looks ok. >=20 > 1. Can anyone confirm? >=20 > 2. With which parameter could I change the starting time "01 0 * * *" so > that this doesn't happen again? I'm searching, but can't find a grip on > this... >=20 > Best, > Matthias --===============7457574400652894529==--