Splunk Dev

How to rollover python logs in splunk

strive
Influencer

Hi,

I could not find settings to roll over python logs in splunk. In our systems, the python.log size is increasing day by day. When the log file size grows exponentially, neither customers can send us the logs, nor we would be able to open using any editors to analyze the issues.

I tried changing the settings in log.cfg, but none worked. I searched splunk base, i found a similar question asked few days back, but its not answered.

http://splunk-base.splunk.com/answers/77755/enabling-python-log-rollover-in-splunk

As a last resort i should write custom scripts which runs on the background to archive and delete python logs. I prefer some settings from splunk side rather than writing custom scripts.

Thanks

Strive

Tags (1)
1 Solution

strive
Influencer

http://dev.splunk.com/view/splunk-extensions/SP-CAAAEA9 this link was helpful.

In my python scripts i set handlers to RotatingFileHandler.

View solution in original post

strive
Influencer

http://dev.splunk.com/view/splunk-extensions/SP-CAAAEA9 this link was helpful.

In my python scripts i set handlers to RotatingFileHandler.

Get Updates on the Splunk Community!

Security Professional: Sharpen Your Defenses with These .conf25 Sessions

Sooooooooooo, guess what. .conf25 is almost here, and if you're on the Security Learning Path, this is your ...

First Steps with Splunk SOAR

Our first step was to gather a list of the playbooks we wanted and to sort them by priority.  Once this list ...

How To Build a Self-Service Observability Practice with Splunk Observability Cloud

If you’ve read our previous post on self-service observability, you already know what it is and why it ...