A while ago I set up remote syslog collection for PIX firewall logs. It’s been working okay but something wasn’t quite right. The logs were changing every seven days instead of every day like I wanted and the old log file didn’t seem to be closed properly some of the time.
I did a little investigating and looked through the configuration files again to make sure that everything was right.
That looks okay, I thought.
To test the postrotate command, I ran it manually from the command line and tada!
There was the problem. There is no
reload flag, it should be
force-reload. Off I
went and edited the configuration file and it’s been working fine since.