Monitoring Splunk

About rotate settings of internal log(splunkd etc...)

yutaka1005
Builder

I checked rotation's timing of the internal log with reference to the manual and log.cfg etc, but I could not find a description about rotate in the following logs.

django_access.log
django_error.log
django_service.log
python.log
splunkd_stderr.log
splunkd_stdout.log
web_access.log
web_service.log

Where is information on the rotation of these files?

Or I think that it is configured in log4j format.
And the default setting of log4j is like below.

Maximum size: 10 MB
Number of stored rotated files: 1

So are these logs also default settings?

If anyone tell me about it, I'm appreciated.

0 Karma
1 Solution

yutaka1005
Builder

I received information about these logs from Splunk support team.


 django_access.log
 django_error.log
 django_service.log

These logs have been deprecated (outdated) since 6.3 version and is not longer used

 python.log

Settings of this log is hard coded and cannot be modified.
max file size:25MB
maintain copies:5


splunkd_stderr.log
splunkd_stdout.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Serverconf#Log_rotation_of_splunkd_stderr.l...
max file size:10MB
maintain copies:2


web_access.log
web_service.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Webconf
max file size:25MB
maintain copies:5


View solution in original post

yutaka1005
Builder

I received information about these logs from Splunk support team.


 django_access.log
 django_error.log
 django_service.log

These logs have been deprecated (outdated) since 6.3 version and is not longer used

 python.log

Settings of this log is hard coded and cannot be modified.
max file size:25MB
maintain copies:5


splunkd_stderr.log
splunkd_stdout.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Serverconf#Log_rotation_of_splunkd_stderr.l...
max file size:10MB
maintain copies:2


web_access.log
web_service.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Webconf
max file size:25MB
maintain copies:5


Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...