Why ubuntu remove older syslog older than syslog.7.gz by default? How can I prevent that to happen? Thanks


Each package adds a file to /etc/logrotate.d/, that way logrotate knows when to remove or refresh log files for that package.

distcc, for example:

$ dpkg -L distcc | fgrep logrotate

So /etc/logrotate.d/distcc contains the rules that logrotate will use.

You need to read the manpage for logrotate.

rsyslog doesn't do anything to rotate or remove log files.

Not the answer you're looking for? Browse other questions tagged or ask your own question.