[Freeipa-users] Re: /var/log volume filling up due to growing logs of signedaudit
On 24/11/2022 09:38, Sam Morris via FreeIPA-users wrote:
> acme/debug.*.log
> ca/debug.*.log
> kra/debug.*.log
> Rotated daily, have never been cleaned up.
> ---
> https://github.com/dogtagpki/pki/issues/3731 filed but no one has taken
> a look at it yet...
> https://www.dogtagpki.org/wiki/PKI_10.5_Subsystem_Debug_Log remarks that
> "[this] logging framework does not support rotation". That being the
> case maybe FreeIPA could take it upon itself to ship a cron job that can
> clean these up?
Actaully I think that page is out of
date--https://github.com/dogtagpki/pki/wiki/Configuring-Subsystem-Debug-Log
is more current. And it says logging can be configured by editing
/usr/share/pki/*/webapps/*/WEB-INF/classes/logging.properties.
But the wiki page says that logs are expired after 7 days, and this
isn't happening. I've checked and all the logging.properties files have:
org.apache.juli.FileHandler.maxDays = 7
So why that's not happening is a mystery...
--
Sam Morris <https://robots.org.uk/>
PGP: rsa4096/CAAA AA1A CA69 A83A 892B 1855 D20B 4202 5CDA 27B9