Originally posted by: SystemAdmin

I have the following line added to rotate logs every day in /etc/syslog.conf. However it doesn't seems to work for me, can some one tell me what am I missing here

1. Added to /etc/syslog.conf

1. PIX Firewall syslog messages

local4.error /var/log/pix/pixfirewall rotate time 1d files 90 # daily rotate, 90 files

2. refresh -s syslogd

1. ls -l /var/log/pix/pixfirewall

-rw------- 1 root system 0 Mar 24 14:22 /var/log/pix/pixfirewall

Note: I haven't setup my pix firewall to send syslog to this server yet. I want to see logrotate works before I do that.
#AIX-Forum

Originally posted by: nagger

Not sure this is the real answer but the manual has the keywords in
1) size
2) files
3) time
order.

ta N
#AIX-Forum

Originally posted by: Casey_B

I am not sure, but my guess would be that there is some logic to not rotate files that are empty.

I would try the following to test it:

logger -plocal4.error stuff
(From my 6.1 system, but I think it is in 5.3, also)

This will place an entry in your syslog file.
Then check tomorrow if it is rotated.

Also, the 6.1 syslogd man page indicates that a "-d" can be used for debugging syslogd.
If you "stopsrc -s syslogd", then "syslogd -d"
It appears that the line you have in syslogd does get read in without error.

Hope this helps,
Casey
#AIX-Forum