Hi all, definetly problem is with permission. When i try manualy rotate result is next : [root@proxy01 ~]# ll /var/log/squid/ total 469016 -rw-r--r-- 1 squid squid 308718681 Jul 29 13:13 access.log -rw-r--r-- 1 squid squid 18831645 Jul 4 23:13 access.log.1.gz -rw-r--r-- 1 squid squid 15437442 Jun 7 21:03 access.log.2.gz -rw-r--r-- 1 squid squid 7987085 May 16 14:37 access.log.3.gz -rw-r--r-- 1 squid squid 4121806 May 1 04:02 access.log.4.gz -rw-r--r-- 1 squid squid 3266210 Apr 24 04:02 access.log.5.gz -rw-r--r-- 1 squid squid 24858481 Jul 29 13:03 cache.log -rw-r--r-- 1 squid squid 2504821 Jul 4 23:13 cache.log.1.gz -rw-r--r-- 1 squid squid 2681893 Jun 7 21:03 cache.log.2.gz -rw-r--r-- 1 squid squid 2360296 May 16 14:37 cache.log.3.gz -rw-r--r-- 1 squid squid 1389531 May 1 04:02 cache.log.4.gz -rw-r--r-- 1 squid squid 934844 Apr 24 04:02 cache.log.5.gz -rw-r--r-- 1 squid squid 1862553 Dec 9 2009 mail.txt -rw-r--r-- 1 squid squid 7144 May 3 21:55 squid.out -rw-r--r-- 1 squid squid 0 Apr 4 2009 store.log [root@proxy01 ~]# rpm -q squid logrotate squid-2.6.STABLE21-6.el5 logrotate-3.7.4-9.el5_5.2 [root@proxy01 ~]# logrotate -d -v -f /etc/logrotate.d/squid reading config file /etc/logrotate.d/squid reading config info for /var/log/squid/access.log reading config info for /var/log/squid/cache.log reading config info for /var/log/squid/store.log Handling 3 logs rotating pattern: /var/log/squid/access.log forced from command line (5 rotations) empty log files are not rotated, old logs are removed considering log /var/log/squid/access.log log needs rotating rotating log /var/log/squid/access.log, log->rotateCount is 5 renaming /var/log/squid/access.log.5.gz to /var/log/squid/access.log.6.gz (rotatecount 5, logstart 1, i 5), renaming /var/log/squid/access.log.4.gz to /var/log/squid/access.log.5.gz (rotatecount 5, logstart 1, i 4), renaming /var/log/squid/access.log.3.gz to /var/log/squid/access.log.4.gz (rotatecount 5, logstart 1, i 3), renaming /var/log/squid/access.log.2.gz to /var/log/squid/access.log.3.gz (rotatecount 5, logstart 1, i 2), renaming /var/log/squid/access.log.1.gz to /var/log/squid/access.log.2.gz (rotatecount 5, logstart 1, i 1), renaming /var/log/squid/access.log.0.gz to /var/log/squid/access.log.1.gz (rotatecount 5, logstart 1, i 0), copying /var/log/squid/access.log to /var/log/squid/access.log.1 truncating /var/log/squid/access.log compressing log with: /bin/gzip removing old log /var/log/squid/access.log.6.gz rotating pattern: /var/log/squid/cache.log forced from command line (5 rotations) empty log files are not rotated, old logs are removed considering log /var/log/squid/cache.log log needs rotating rotating log /var/log/squid/cache.log, log->rotateCount is 5 renaming /var/log/squid/cache.log.5.gz to /var/log/squid/cache.log.6.gz (rotatecount 5, logstart 1, i 5), renaming /var/log/squid/cache.log.4.gz to /var/log/squid/cache.log.5.gz (rotatecount 5, logstart 1, i 4), renaming /var/log/squid/cache.log.3.gz to /var/log/squid/cache.log.4.gz (rotatecount 5, logstart 1, i 3), renaming /var/log/squid/cache.log.2.gz to /var/log/squid/cache.log.3.gz (rotatecount 5, logstart 1, i 2), renaming /var/log/squid/cache.log.1.gz to /var/log/squid/cache.log.2.gz (rotatecount 5, logstart 1, i 1), renaming /var/log/squid/cache.log.0.gz to /var/log/squid/cache.log.1.gz (rotatecount 5, logstart 1, i 0), copying /var/log/squid/cache.log to /var/log/squid/cache.log.1 truncating /var/log/squid/cache.log compressing log with: /bin/gzip removing old log /var/log/squid/cache.log.6.gz rotating pattern: /var/log/squid/store.log forced from command line (5 rotations) empty log files are not rotated, old logs are removed considering log /var/log/squid/store.log log does not need rotating not running postrotate script, since no logs were rotated [root@proxy01 ~]# squid -k rotate [root@proxy01 ~]# ls -lZ /var/log/squid/ -rw-r--r-- squid squid root:object_r:squid_log_t:s0 access.log -rw-r--r-- squid squid root:object_r:squid_log_t:s0 access.log.1.gz -rw-r--r-- squid squid root:object_r:squid_log_t:s0 access.log.2.gz -rw-r--r-- squid squid root:object_r:squid_log_t:s0 access.log.3.gz -rw-r--r-- squid squid root:object_r:squid_log_t:s0 access.log.4.gz -rw-r--r-- squid squid root:object_r:squid_log_t:s0 access.log.5.gz -rw-r--r-- squid squid root:object_r:squid_log_t:s0 cache.log -rw-r--r-- squid squid root:object_r:squid_log_t:s0 cache.log.1.gz -rw-r--r-- squid squid root:object_r:squid_log_t:s0 cache.log.2.gz -rw-r--r-- squid squid root:object_r:squid_log_t:s0 cache.log.3.gz -rw-r--r-- squid squid root:object_r:squid_log_t:s0 cache.log.4.gz -rw-r--r-- squid squid root:object_r:squid_log_t:s0 cache.log.5.gz -rw-r--r-- squid squid root:object_r:squid_log_t:s0 mail.txt -rw-r--r-- squid squid root:object_r:squid_log_t:s0 squid.out -rw-r--r-- squid squid root:object_r:squid_log_t:s0 store.log -rw-r--r-- squid squid root:object_r:squid_log_t:s0 trendmicro.log [root@proxy01 ~]# ll /var/log/squid/ total 469212 -rw-r--r-- 1 squid squid 308914051 Jul 29 13:19 access.log -rw-r--r-- 1 squid squid 18831645 Jul 4 23:13 access.log.1.gz -rw-r--r-- 1 squid squid 15437442 Jun 7 21:03 access.log.2.gz -rw-r--r-- 1 squid squid 7987085 May 16 14:37 access.log.3.gz -rw-r--r-- 1 squid squid 4121806 May 1 04:02 access.log.4.gz -rw-r--r-- 1 squid squid 3266210 Apr 24 04:02 access.log.5.gz -rw-r--r-- 1 squid squid 24859168 Jul 29 13:19 cache.log -rw-r--r-- 1 squid squid 2504821 Jul 4 23:13 cache.log.1.gz -rw-r--r-- 1 squid squid 2681893 Jun 7 21:03 cache.log.2.gz -rw-r--r-- 1 squid squid 2360296 May 16 14:37 cache.log.3.gz -rw-r--r-- 1 squid squid 1389531 May 1 04:02 cache.log.4.gz -rw-r--r-- 1 squid squid 934844 Apr 24 04:02 cache.log.5.gz -rw-r--r-- 1 squid squid 1862553 Dec 9 2009 mail.txt -rw-r--r-- 1 squid squid 7144 May 3 21:55 squid.out -rw-r--r-- 1 squid squid 0 Apr 4 2009 store.log After rotation files are not changed. What is wrong with permission? Njegos On Thu, Jul 28, 2011 at 10:19 AM, Railic Njegos <railic.njegos@xxxxxxxxx> wrote: > After all, I reviewed squid.conf and found l: > > #logfile_rotate 0 > > is commented. I uncommented this line, set all permission to 664 > > root@ server# ll /var/log/squid/ > total 8292 > -rw-r--r-- 1 squid squid 4205163 Jul 28 10:11 access.log > -rw-r--r-- 1 squid squid 575272 Jul 28 04:02 access.log.1.gz > -rw-r--r-- 1 squid squid 541432 Jul 27 04:02 access.log.2.gz > -rw-r--r-- 1 squid squid 678548 Jul 26 04:02 access.log.3.gz > -rw-r--r-- 1 squid squid 53749 Jul 25 04:02 access.log.4.gz > -rw-r--r-- 1 squid squid 181229 Jul 24 04:02 access.log.5.gz > -rw-r--r-- 1 squid squid 1063373 Jul 28 10:06 cache.log > -rw-r--r-- 1 squid squid 158995 Jul 28 04:02 cache.log.1.gz > -rw-r--r-- 1 squid squid 125093 Jul 27 04:02 cache.log.2.gz > -rw-r--r-- 1 squid squid 100423 Jul 26 04:02 cache.log.3.gz > -rw-r--r-- 1 squid squid 140 Jul 25 04:02 cache.log.4.gz > -rw-r--r-- 1 squid squid 119508 Jul 24 04:02 cache.log.5.gz > -rw-r--r-- 1 squid squid 534963 Dec 9 2009 mail.txt > -rw-r--r-- 1 squid squid 7068 Jul 4 23:22 squid.out > -rw-r--r-- 1 squid squid 0 Apr 4 2009 store.log > -rw-r--r-- 1 squid squid 0 Jul 23 2009 test.txt > > > and > > ll /etc/logrotate.d/ > > -rw-r--r-- 1 root root 543 Jul 28 10:11 squid > > And now I wait until tommorow. > > Njegos > > > On Fri, Jul 22, 2011 at 3:59 PM, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote: >> On 23/07/11 00:50, Will Roberts wrote: >>> >>> Hi Amos, >>> >>> On Fri, Jul 22, 2011 at 12:32 AM, Amos Jeffries<squid3@xxxxxxxxxxxxx> >>> wrote: >>>> >>>> Can you check the contents of the squid.pid file vs the processes that >>>> are actually running between step (6) and (7). >>> >>> Sure, here are the processes after each step that would cause a change: >>> >>> Step 3: >>> 1879 ? Ss 0:00 /usr/sbin/squid3 -YC -f /etc/squid3/squid.conf >>> 1881 ? S 0:00 (squid) -YC -f /etc/squid3/squid.conf >>> 1890 ? S 0:00 (digest_pw_auth) -c /etc/squid3/digest >>> >>> Step 5: >>> 1879 ? Ss 0:00 /usr/sbin/squid3 -YC -f /etc/squid3/squid.conf >>> 1881 ? S 0:00 (squid) -YC -f /etc/squid3/squid.conf >>> 1890 ? S 0:00 (digest_pw_auth) -c /etc/squid3/digest >>> >>> Step 7: >>> 1879 ? Ss 0:00 /usr/sbin/squid3 -YC -f /etc/squid3/squid.conf >>> 1881 ? S 0:00 (squid) -YC -f /etc/squid3/squid.conf >>> 2237 ? S 0:00 (digest_pw_auth) -c /etc/squid3/digest >>> >>> And the pid file never changed from 1881. Let me know if you want an >>> strace or anything else. >>> >>> --Will >> >> I'm out of ideas for now. I suspected the old issue of PID left pointing at >> the crashed/gone process, but seems we did really fix that one. >> >> So it comes down to why the automated rotate was crashing in the first >> place. >> >> Amos >> -- >> Please be using >> Current Stable Squid 2.7.STABLE9 or 3.1.14 >> Beta testers wanted for 3.2.0.9 >> >