newsyslogd / pflogd : daily logfiles for pf

[Ruben]

Hi,

Anybody out there with a working rotation on /var/log/pflog (using 
newsyslog) ?

All help/suggestions welcome!

Kind regards,

Ruben

On 07/30/2018 05:12 PM, Ruben wrote:
> 
> Hi List,
> 
> 
> I'm running PF on some FreeBSD 11.x installs and I would very much like 
> to have daily logfiles containing the entries that land up in the pflog 
> device. I'm having trouble switching from "max size" rotation to "once a 
> day, regardless of size" rotation.
> 
> 
> 
> My pflog entry in /etc/newsyslog.conf looked like this:
> 
> /var/log/pflog      600  3    100    @T00 JB    /var/run/pflogd.pid
> 
> 
> and after my attempted change now looks like this:
> 
> /var/log/pflog      600  30    *    @T00 JB    /var/run/pflogd.pid
> 
> 
> but no new /var/log/pflog.0.bz2 files are created anymore. If I run the 
> newsyslog binary manually like this :
> 
> /usr/sbin/newsyslog -vCF
> 
> then the /var/log/pflog.* are created / rotated.
> 
> 
> Could somebody perhaps shed some light on what I'm doing wrong here?
> 
> 
> Any help appreciated!
> 
> 
> Kind regards,
> 
> 
> Ruben
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe at freebsd.org"