Monitoring Splunk

About rotate settings of internal log(splunkd etc...)

yutaka1005
Builder

I checked rotation's timing of the internal log with reference to the manual and log.cfg etc, but I could not find a description about rotate in the following logs.

django_access.log
django_error.log
django_service.log
python.log
splunkd_stderr.log
splunkd_stdout.log
web_access.log
web_service.log

Where is information on the rotation of these files?

Or I think that it is configured in log4j format.
And the default setting of log4j is like below.

Maximum size: 10 MB
Number of stored rotated files: 1

So are these logs also default settings?

If anyone tell me about it, I'm appreciated.

0 Karma
1 Solution

yutaka1005
Builder

I received information about these logs from Splunk support team.


 django_access.log
 django_error.log
 django_service.log

These logs have been deprecated (outdated) since 6.3 version and is not longer used

 python.log

Settings of this log is hard coded and cannot be modified.
max file size:25MB
maintain copies:5


splunkd_stderr.log
splunkd_stdout.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Serverconf#Log_rotation_of_splunkd_stderr.l...
max file size:10MB
maintain copies:2


web_access.log
web_service.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Webconf
max file size:25MB
maintain copies:5


View solution in original post

yutaka1005
Builder

I received information about these logs from Splunk support team.


 django_access.log
 django_error.log
 django_service.log

These logs have been deprecated (outdated) since 6.3 version and is not longer used

 python.log

Settings of this log is hard coded and cannot be modified.
max file size:25MB
maintain copies:5


splunkd_stderr.log
splunkd_stdout.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Serverconf#Log_rotation_of_splunkd_stderr.l...
max file size:10MB
maintain copies:2


web_access.log
web_service.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Webconf
max file size:25MB
maintain copies:5


Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Building Momentum: Splunk Developer Program at .conf25

At Splunk, developers are at the heart of innovation. That’s why this year at .conf25, we officially launched ...