how to set log rotation on Isilon?

The settings are in /etc/newsyslog.conf.

See https://support.emc.com/kb/16545

Thank you for your update.

Yes, I referred to that KB and changed our Isilon settings with the following manual.

=====================manual================================

reference：emc14002345　https://emc--c.na5.visual.force.com/apex/KB_HowTo?id=kA0700000004JqU

log onto one of the isilon node as root.

■change log rotation setting

cp /etc/newsyslog.conf /ifs/data/newsyslog.conf.original_`hostname`

cp /etc/newsyslog.conf /ifs/data/newsyslog.conf.20131029

vi newsyslog.conf.20131029

   /var/log/audit/smb.log                  644  336   *    1     ZC ⇒edited this line only.

isi_for_array "cp /ifs/data/newsyslog.conf.20131029 /etc/newsyslog.conf"

■change log output location

mkdir /ifs/auditlog

isi_for_array -s 'touch /ifs/auditlog/`hostname`/smb.log'

isi_for_array -s 'mv /var/log/audit /var/log/audit.original'

isi_for_array -s 'ln -sF /ifs/auditlog/`hostname`/ /var/log/audit'

vi  /ifs/auditlog/localaudit

   #!/bin/sh

   # PROVIDE: local_audit

   # REQUIRE: isi_mount_ifs syslogd

   . /etc/rc.subr

   name="local_audit"

   start_cmd="echo 'send HUP to syslogd ...'; killall -HUP syslogd"

   stop_cmd="/usr/bin/true"

   load_rc_config $name

   run_rc_command "$1"

   /usr/bin/logger -i -p ifs.err "syslogd restarted successfully."

isi_for_array -sq 'install /ifs/auditlog/localaudit /etc/rc.d'

isi_for_array -s killall -HUP syslogd

=====================result================================

I think the log will be rotated at 30-mins interval, but sometimes log rotation skipped.

Could you tell me why did the rotation skip?

FZISL002DK-2# isi_for_array -s 'ls -alt /var/log/audit/*'

FZISL002DK-1: -rw-r--r-- 1 root  wheel   67 Oct 30 09:30 /var/log/audit/smb.log

FZISL002DK-1: -rw-r--r-- 1 root  wheel  108 Oct 30 09:30 /var/log/audit/smb.log.0.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  106 Oct 30 08:30 /var/log/audit/smb.log.1.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  110 Oct 30 08:00 /var/log/audit/smb.log.2.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  106 Oct 30 07:30 /var/log/audit/smb.log.3.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  110 Oct 30 07:00 /var/log/audit/smb.log.4.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  108 Oct 30 06:30 /var/log/audit/smb.log.5.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  108 Oct 30 05:30 /var/log/audit/smb.log.6.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  106 Oct 30 04:30 /var/log/audit/smb.log.7.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  110 Oct 30 04:00 /var/log/audit/smb.log.8.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  106 Oct 30 03:30 /var/log/audit/smb.log.9.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  111 Oct 30 03:00 /var/log/audit/smb.log.10.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  521 Oct 30 02:30 /var/log/audit/smb.log.11.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  394 Oct 30 02:00 /var/log/audit/smb.log.12.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  109 Oct 30 01:00 /var/log/audit/smb.log.13.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  113 Oct 30 00:30 /var/log/audit/smb.log.14.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  110 Oct 29 23:30 /var/log/audit/smb.log.15.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  109 Oct 29 23:00 /var/log/audit/smb.log.16.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  107 Oct 29 22:30 /var/log/audit/smb.log.17.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  109 Oct 29 22:00 /var/log/audit/smb.log.18.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  107 Oct 29 21:30 /var/log/audit/smb.log.19.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  109 Oct 29 21:00 /var/log/audit/smb.log.20.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  106 Oct 29 20:30 /var/log/audit/smb.log.21.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  109 Oct 29 20:00 /var/log/audit/smb.log.22.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  237 Oct 29 19:30 /var/log/audit/smb.log.23.gz

FZISL002DK-1: -rw-r--r-- 1 root  wheel  110 Oct 29 18:30 /var/log/audit/smb.log.24.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel   67 Oct 30 09:30 /var/log/audit/smb.log

FZISL002DK-2: -rw-r--r-- 1 root  wheel  106 Oct 30 09:30 /var/log/audit/smb.log.0.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  110 Oct 30 09:00 /var/log/audit/smb.log.1.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  108 Oct 30 08:30 /var/log/audit/smb.log.2.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  106 Oct 30 07:30 /var/log/audit/smb.log.3.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  111 Oct 30 07:00 /var/log/audit/smb.log.4.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  106 Oct 30 06:30 /var/log/audit/smb.log.5.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  110 Oct 30 06:00 /var/log/audit/smb.log.6.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  104 Oct 30 05:30 /var/log/audit/smb.log.7.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  109 Oct 30 05:00 /var/log/audit/smb.log.8.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  106 Oct 30 04:30 /var/log/audit/smb.log.9.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  110 Oct 30 04:00 /var/log/audit/smb.log.10.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  107 Oct 30 03:30 /var/log/audit/smb.log.11.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  395 Oct 30 03:00 /var/log/audit/smb.log.12.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  394 Oct 30 02:00 /var/log/audit/smb.log.13.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  109 Oct 30 01:00 /var/log/audit/smb.log.14.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  105 Oct 30 00:30 /var/log/audit/smb.log.15.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  112 Oct 30 00:00 /var/log/audit/smb.log.16.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  107 Oct 29 23:30 /var/log/audit/smb.log.17.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  109 Oct 29 23:00 /var/log/audit/smb.log.18.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  107 Oct 29 22:30 /var/log/audit/smb.log.19.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  109 Oct 29 22:00 /var/log/audit/smb.log.20.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  109 Oct 29 21:30 /var/log/audit/smb.log.21.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  106 Oct 29 20:30 /var/log/audit/smb.log.22.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  108 Oct 29 20:00 /var/log/audit/smb.log.23.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  108 Oct 29 19:30 /var/log/audit/smb.log.24.gz

FZISL002DK-2: -rw-r--r-- 1 root  wheel  107 Oct 29 18:30 /var/log/audit/smb.log.25.gz