exim mail logs on mx1001/mx2001 are being kept for 10 days now (up to mainlog.9.gz). That's probably a little too short. We should increase the retention period to something longer but still within the days of our privacy policy (90 days). Either 60 or 90 days should probably be our choice.
Description
Details
Project | Branch | Lines +/- | Subject | |
---|---|---|---|---|
operations/puppet | production | +17 -0 | Add logrotate template to retain 60 days of exim mx logs |
Related Objects
Event Timeline
Change https://gerrit.wikimedia.org/r/#/c/357723 to increase exim log retention to 60 days is ready for review
FWIW if we also want to store mail logs off-host a simple solution would be to syslog exim logs too, syslog hosts already have 90d retention in place.
Change 357723 had a related patch set uploaded (by Herron; owner: Herron):
[operations/puppet@production] Add logrotate template to retain 60 days of exim mx logs
Change 357723 merged by Herron:
[operations/puppet@production] Add logrotate template to retain 60 days of exim mx logs
Merged https://gerrit.wikimedia.org/r/357723 and ran puppet on mx[1,2]001 to extend local log retention to 60 days. Will double check tomorrow that a mainlog.11.gz is present.
Mentioned in SAL (#wikimedia-operations) [2017-07-06T15:12:20Z] <herron> extend mx[1,2]001 exim log retention to 60 days - T167333
Confirming that the updated logrotate config works. Files have been rotated to .11.gz.
-rw-r----- 1 Debian-exim adm 22M Jun 27 06:25 /var/log/exim4/mainlog.11.gz -rw-r----- 1 Debian-exim adm 11M Jun 27 06:25 /var/log/exim4/rejectlog.11.gz