SA 10.6.2 - secure and messages log files are not being compressed and archived on Primary SA Server
3 years ago
Originally Published: 2017-05-31
Article Number
000049967
Applies To
RSA Product Set: Security Analytics
RSA Product/Service Type: SA Core Appliance

 
Issue
SA 10.6.2 - secure and messages log files are not being compressed and archived, The logrotate job is not completing because of errors/
Cause

When running the command by hand.  logrotate /etc/logrotate.conf it was noticed that certain logs are not present causing the job to error and fail.


 
Resolution
In this case. the error was the spooler.  We performed a simple touch>  touch /var/log/spooler

We then ran the logrotate -vf /etc/logrotate.conf without errror.

This is the correct fix >
 
add this entry to the logrotate.conf file to skip missing log files;
# ignore missing log files

missingok