Re: rolling over the errpt file

On Tue, Feb 26, 2008 at 09:41:10AM -0500, Vincent D'Antonio wrote:
Good Morning,
This morning I was asked to decrease the size of /var/adm/ras/errlog file.
So I ran the errclear command but this does not shrink the file size.

The file is preallocated to be a certain size. It is a circular log.

See the man page on the errdemon command to set the size, however just
some advice, if you are worried about the size of the errlog file, you should
probably just consider increasing the size of the /var filesystem ;-)

Question:

Is there a way to a binary extract of the errlog log and only keep the last
90 days? Maybe a script to roll the errlog every 30 days?

Part of that is being done by a root crontab entry:

0 11 * * * /usr/bin/errclear -d S,O 30
0 12 * * * /usr/bin/errclear -d H 90

If you make the errlog too small, you may miss errors that give you a clue
to a potential problem. If you have an entry that keeps repeating such as
a 'init respawn' or a 'SRC error (program core)', you should look into whats up
with that.

hth,

bob