I did recently see weird problems with audit.log, due to rotation
problems I think triggered by some selinux denials. It might be worth
checking the permissions on the old logs or seeing if "logrotate
--force /etc/logrotate.conf" works?
-B.
On Tue, 2008-12-16 at 05:44 +0100, Dennis J. wrote:
Hi,
It seems that the syslog daemon overwrites the current /var/log/messages
after a reboot rather than appending to it. My machine just froze (either
an iscsi or ocfs2 issue) so after the reboot I tried to find some info in
the syslog but that only contains the entries since the reboot. The
previous logfile only contains entries between the 2nd and 9th of November.
Anyone else seeing this strange logging behaviour?
Regards,
Dennis