<html><body>
<p><font size="2">Hello,</font><br>
<br>
<font size="2">I just want to share a issue we have seen the other day.</font><br>
<br>
<font size="2">I recently configured logrotate to rotate the hobbit logs in /var/log/hobbit</font><br>
<font size="2">(I know, it's XYmon, but we still run 4.2)</font><br>
<br>
<font size="2">These were the lines I used:</font><br>
<font size="2">---------------------------------------------------------</font><br>
<font size="2">/var/log/hobbit/* {</font><br>
<font size="2"> compress</font><br>
<font size="2"> dateext</font><br>
<font size="2"> maxage 60</font><br>
<font size="2"> rotate 1</font><br>
<font size="2"> missingok</font><br>
<font size="2"> notifempty</font><br>
<font size="2"> daily</font><br>
<font size="2"> olddir /var/log/oldlog/hobbit</font><br>
<font size="2"> create 640 root root</font><br>
<font size="2"> sharedscripts</font><br>
<font size="2"> postrotate</font><br>
<font size="2"> /etc/init.d/hobbit restart</font><br>
<font size="2"> endscript</font><br>
<font size="2">}<br>
---------------------------------------------------------</font><br>
<br>
<font size="2">After the logrotate happened - midnight - I received hundreds of hobbit alerts - Ups - was the whole network down?<br>
I logged in and could reach the hobbit server - network works...</font><br>
<font size="2">But all (and only those) connection tests failed. Everything was red. A ping however show results and the traceroute reached the systems as well.</font><br>
<br>
<font size="2">The reason was simple.</font><br>
<font size="2">The Logrotate has re-created the hobbit log files - with 640 root root - as in the config.</font><br>
<font size="2">Hobbit however was not able to write into these files, as it runs as hobbit:users...</font><br>
<font size="2">My fault... Changing permission and of course the failure in logrotate, restart hobbit and everything becomes green again.</font><br>
<br>
<font size="2">I would have assumed, that hobbit simply decide not to start as it could not write to the logs...</font><br>
<font size="2">Or that the conn tests went clean due to this...</font><br>
<font size="2">This causes some calls this morning for the other guys on the alerting lists... ;-)</font><br>
<br>
<font size="2"><br>
mit freundlichen Grüßen - Best regards<br>
med vänlig hälsning - Met vriendelijke groeten<br>
Sincères salutations<br>
</font><i><font size="2"><br>
Oliver Grube</font></i><font size="2"> </font></body></html>
<pre>Campbell’s Germany GmbH
Registergericht Luebeck • Reg. Nr. HRB 4082
Geschaeftsfuehrer: Joseph B. Folds III
Geschaeftssitz:
Geniner Strasse 88 - 100
23560 Luebeck
Deutschland
**********************************************************************
This e-mail and any files transmitted with it may contain
confidential information and is intended solely for use by
the individual to whom it is addressed. If you received
this e-mail in error, please notify the sender, do not
disclose its contents to others and delete it from your
system.
**********************************************************************