Monitoring Splunk

About rotate settings of internal log(splunkd etc...)

yutaka1005
Builder

I checked rotation's timing of the internal log with reference to the manual and log.cfg etc, but I could not find a description about rotate in the following logs.

django_access.log
django_error.log
django_service.log
python.log
splunkd_stderr.log
splunkd_stdout.log
web_access.log
web_service.log

Where is information on the rotation of these files?

Or I think that it is configured in log4j format.
And the default setting of log4j is like below.

Maximum size: 10 MB
Number of stored rotated files: 1

So are these logs also default settings?

If anyone tell me about it, I'm appreciated.

0 Karma
1 Solution

yutaka1005
Builder

I received information about these logs from Splunk support team.


 django_access.log
 django_error.log
 django_service.log

These logs have been deprecated (outdated) since 6.3 version and is not longer used

 python.log

Settings of this log is hard coded and cannot be modified.
max file size:25MB
maintain copies:5


splunkd_stderr.log
splunkd_stdout.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Serverconf#Log_rotation_of_splunkd_stderr.l...
max file size:10MB
maintain copies:2


web_access.log
web_service.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Webconf
max file size:25MB
maintain copies:5


View solution in original post

yutaka1005
Builder

I received information about these logs from Splunk support team.


 django_access.log
 django_error.log
 django_service.log

These logs have been deprecated (outdated) since 6.3 version and is not longer used

 python.log

Settings of this log is hard coded and cannot be modified.
max file size:25MB
maintain copies:5


splunkd_stderr.log
splunkd_stdout.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Serverconf#Log_rotation_of_splunkd_stderr.l...
max file size:10MB
maintain copies:2


web_access.log
web_service.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Webconf
max file size:25MB
maintain copies:5


Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...