Logrotate - Revision history

Nick at 03:38, 27 March 2026

2026-03-27T03:38:30Z

Nick: Created page with ""logrotate is designed to ease administration of systems that generate large numbers of log files. It allows automaticrotation, compression, removal, and mailing of log files...."

2026-03-26T13:19:14Z

Created page with ""logrotate is designed to ease administration of systems that generate large numbers of log files. It allows automaticrotation, compression, removal, and mailing of log files...."

New page

"logrotate is designed to ease administration of systems that generate large numbers of log files. It allows automaticrotation, compression, removal, and mailing of log files. Each log file may be handled daily, weekly, monthly, or when it grows too large." - From the logrotate man page(8).

= Logrotate =

== Running Logrotate Manually ==

To perform a dry-run of a logrotate job:
<nowiki>sudo logrotate -d /etc/logrotate.d/service</nowiki>

To force a rotation of a logrotate job:
<nowiki>sudo logrotate -f /etc/logrotate.d/service</nowiki>

It's always good to verify that logrotate worked and that old logs have been rotated/removed by:
<nowiki>ls -la /var/log/service/</nowiki>

== Running Logrotate Automatically/Scheduled (Logrotate.d) ==

=== Config Files ===
Logrotate runs using files located at:
<nowiki>/etc/logrotate.d/servicename</nowiki>

Apps and services hosted on a system that generate logs will likely have entries in this directory (or they can be created within this directory) to manage the generation/disposal/handling of logs.

You can configure how long files are kept, how many files are kept, if files should be compressed, what to do with files that no longer need to be kept, and much more.

=== Logrotate.d Arguments / Options ===

Some examples of the options that can be used in these Logrotate config files are:

==== When to Rotate Log Files ====
<nowiki>
hourly # Uncommon, requires additional changes to the cron configuration for logrotate to function hourly
daily
weekly [weekday] # Defaults to every Sunday if no [weekday] is provided, where Sunday is 0, Monday is 1, etc
monthly [monthday] # Defaults to the first day of the month if no [monthday] is provided
yearly # Only runs when the year has changed between rotations
minutes [minutes] # rotates logs after X minutes
size [size] # Rotates logs after log file has exceeded ''size'', can use Xk, XM, XG units to provide size</nowiki>

==== How Long to Retain Log Files ====
How many versions of log files to keep
<nowiki>rotate [#]</nowiki>

==== Compression ====
Whether the log files should be compressed
<nowiki>
nocompress # This is default if unspecified
compress</nowiki>

Whether the '''most recent''' version should be compressed
<nowiki>
nodelaycompress # This is default if unspecified, overwrites 'delaycompress'
delaycompress # Delays compression of most recent log file by 1 cycle</nowiki>

==== Missing Logs ====
Whether it's alright that there is NO log file to be rotated
<nowiki>
nomissingok # Issues an error if log file is missing, this is default if unspecified
missingok # Does NOT issue an error if log file is missing</nowiki>

==== Empty Logs ====
Whether the log should be rotated when the log is present, but it is empty
<nowiki>
ifempty # Rotates the file even if it is empty, this is the default if not specified, overwrites notifempty
notifempty # Does NOT rotate the file if it is empty, overwrites ifempty</nowiki>

==== Creating New Logs ====
Creating a new log file, with same name as rotated file, for the service to use after the logs have been rotated, with provided octal permissions, owner, and group
<nowiki>create [###] [OWNER] [GROUP]</nowiki>
Note: Any/All of these arguments can be omitted. '''Missing arguments will inherit their values from the log files being rotated.'''

==== Sharedscripts / Postrotate Scripts ====
Additional commands can be executed after logrotate has finished rotating logs, and those can be passed via:
<nowiki>sharedscripts
postrotate
echo "Hello World! :)" > /Some/File/Location
endscript</nowiki>

Or more commonly, to restart the service in question
<nowiki>sharedscripts
postrotate
/bin/systemctl reload httpd.service > /dev/null 2>/dev/null || true
endscript</nowiki>

=== Example Logrotate.d/service File ===
For an example of what these might look like in practice, a basic logrotate file for Nginx is provided below:
<nowiki>/var/log/nginx/*.log {
daily # Rotates logs daily
rotate 7 # Keeps 7 versions, in this case 7 days' worth of versions
compress # Compresses old versions with Gzip to save space
delaycompress # Does NOT compress the most recent version / waits 1 cycle (in this case 1 day) before compressing
missingok # No error is generated if a log file is missing
notifempty # Does NOT rotate the log if the log file is empty
create 640 httpd root # Creates a new log file with the provided permissions, owner, and group
sharedscripts # Instead of running postrotate script once per file, it runs when all files are finished rotating
postrotate # Executed after logrotate has finished
/bin/kill -USR1 'cat /run/nginx.pid 2>/dev/null' 2>/dev/null || true
endscript # Marks the end of the postrotate script
}</nowiki>

@@ Line 1: / Line 1: @@
 "logrotate is designed to ease administration of systems that generate large numbers of log files. It allows automaticrotation, compression, removal, and mailing of log files. Each log file may be handled daily, weekly, monthly, or when it grows too large." - From the logrotate man page(8).
-= Logrotate =
+= Running Logrotate Manually =
 To perform a dry-run of a logrotate job:
@@ Line 15: / Line 13: @@
-== Running Logrotate Automatically/Scheduled (Logrotate.d) ==
+= Running Logrotate Automatically/Scheduled (Logrotate.d) =
-=== Config Files ===
+== Config Files ==
 Logrotate runs using files located at:
   <nowiki>/etc/logrotate.d/servicename</nowiki>
@@ Line 27: / Line 25: @@
-=== Logrotate.d Arguments / Options ===
+== Logrotate.d Arguments / Options ==
 Some examples of the options that can be used in these Logrotate config files are:
-==== When to Rotate Log Files ====
+=== When to Rotate Log Files ===
   <nowiki>
 hourly             # Uncommon, requires additional changes to the cron configuration for logrotate to function hourly
@@ Line 41: / Line 39: @@
 size [size]        # Rotates logs after log file has exceeded ''size'', can use Xk, XM, XG units to provide size</nowiki>
-==== How Long to Retain Log Files ====
+=== How Long to Retain Log Files ===
 How many versions of log files to keep
   <nowiki>rotate [#]</nowiki>
-==== Compression ====
+=== Compression ===
 Whether the log files should be compressed
   <nowiki>
@@ Line 56: / Line 54: @@
 delaycompress      # Delays compression of most recent log file by 1 cycle</nowiki>
-==== Missing Logs ====
+=== Missing Logs ===
 Whether it's alright that there is NO log file to be rotated
   <nowiki>
@@ Line 62: / Line 60: @@
 missingok          # Does NOT issue an error if log file is missing</nowiki>
-==== Empty Logs ====
+=== Empty Logs ===
 Whether the log should be rotated when the log is present, but it is empty
   <nowiki>
@@ Line 68: / Line 66: @@
 notifempty         # Does NOT rotate the file if it is empty, overwrites ifempty</nowiki>
-==== Creating New Logs ====
+=== Creating New Logs ===
 Creating a new log file, with same name as rotated file, for the service to use after the logs have been rotated, with provided octal permissions, owner, and group
   <nowiki>create [###] [OWNER] [GROUP]</nowiki>
 Note: Any/All of these arguments can be omitted. '''Missing arguments will inherit their values from the log files being rotated.'''
-==== Sharedscripts / Postrotate Scripts ====
+=== Sharedscripts / Postrotate Scripts ===
 Additional commands can be executed after logrotate has finished rotating logs, and those can be passed via:
   <nowiki>sharedscripts
@@ Line 86: / Line 84: @@
 endscript</nowiki>
-=== Example Logrotate.d/service File ===
+== Example Logrotate.d/service File ==
 For an example of what these might look like in practice, a basic logrotate file for Nginx is provided below:
   <nowiki>/var/log/nginx/*.log {