Monitoring Splunk

About rotate settings of internal log(splunkd etc...)

Builder

I checked rotation's timing of the internal log with reference to the manual and log.cfg etc, but I could not find a description about rotate in the following logs.

django_access.log
django_error.log
django_service.log
python.log
splunkd_stderr.log
splunkd_stdout.log
web_access.log
web_service.log

Where is information on the rotation of these files?

Or I think that it is configured in log4j format.
And the default setting of log4j is like below.

Maximum size: 10 MB
Number of stored rotated files: 1

So are these logs also default settings?

If anyone tell me about it, I'm appreciated.

0 Karma
1 Solution

Builder

I received information about these logs from Splunk support team.


 django_access.log
 django_error.log
 django_service.log

These logs have been deprecated (outdated) since 6.3 version and is not longer used

 python.log

Settings of this log is hard coded and cannot be modified.
max file size:25MB
maintain copies:5


splunkd_stderr.log
splunkd_stdout.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Serverconf#Log_rotation_of_splunkd_stderr.l...
max file size:10MB
maintain copies:2


web_access.log
web_service.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Webconf
max file size:25MB
maintain copies:5


View solution in original post

Builder

I received information about these logs from Splunk support team.


 django_access.log
 django_error.log
 django_service.log

These logs have been deprecated (outdated) since 6.3 version and is not longer used

 python.log

Settings of this log is hard coded and cannot be modified.
max file size:25MB
maintain copies:5


splunkd_stderr.log
splunkd_stdout.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Serverconf#Log_rotation_of_splunkd_stderr.l...
max file size:10MB
maintain copies:2


web_access.log
web_service.log

Settings of these logs are described in below manual
https://docs.splunk.com/Documentation/Splunk/7.0.2/Admin/Webconf
max file size:25MB
maintain copies:5


View solution in original post