The way logrotate is configured and triggered is often misunderstood by Linux users and System Administrators alike. This video uses six Linux servers to simulate a syslog server environment to generate a large amount of logging information in a very short time, requiring regular log rotation.
We explore how the default daily rotation schedule can become a bottleneck in high-traffic environments, leading to oversized log files and potentially maxed out /var/filesystem. From there, we walk through how logrotate.timer is configured by default, why it may not be sufficient, and how to safely adjust its trigger interval to run more frequently.
By the end of the session, you’ll understand how to fine-tune log rotation timing to better suit real-world workloads, keeping logs manageable and your system running smoothly.
Aimed at both Linux beginners and experienced Linux users alike, we cover all aspects of logrotate and add an introduction to rsyslog for additional spice!
Enjoy and please do comment!
