cPFence Im really annoyed with ols logs being 5+gb in a week, and since we don't have persistent config we can't do anything about ols default rotation which i think is set to 90 freakin days! If possible can you please add some logic for ols logs also.. we are using a custom script of our own but im not sure if we should use it or not..
#!/bin/bash
LOG_FILE="/root/maintenance/logs-cleanup.log"
DATE=$(date +"%Y-%m-%d %H:%M:%S")
DAYS_TO_KEEP=3
echo "Starting logs cleanup at $DATE" >> $LOG_FILE
# Clear OpenLiteSpeed logs older than 3 days
if [ -d "/usr/local/lsws/logs/" ]; then
# Get the date 3 days ago in the format used by OLS logs
THREE_DAYS_AGO=$(date -d "$DAYS_TO_KEEP days ago" +"%Y_%m_%d")
# Find and remove error logs older than 3 days based on filename pattern
# First pattern: logs with date and hour suffix (error.log.2025_03_22.15)
find /usr/local/lsws/logs/ -type f -name "*.log.????_??_??.??" | while read file; do
FILE_DATE=$(echo "$file" | grep -o "[0-9]\{4\}_[0-9]\{2\}_[0-9]\{2\}")
if [ ! -z "$FILE_DATE" ] && [ "$FILE_DATE" \< "$THREE_DAYS_AGO" ]; then
rm -f "$file"
echo "Removed old log: $file" >> $LOG_FILE
fi
done
# Second pattern: logs with just date suffix (error.log.2025_03_20)
find /usr/local/lsws/logs/ -type f -name "*.log.????_??_??" | while read file; do
FILE_DATE=$(echo "$file" | grep -o "[0-9]\{4\}_[0-9]\{2\}_[0-9]\{2\}")
if [ ! -z "$FILE_DATE" ] && [ "$FILE_DATE" \< "$THREE_DAYS_AGO" ]; then
rm -f "$file"
echo "Removed old log: $file" >> $LOG_FILE
fi
done
# Handle special logs (lsrestart.log, security_audit.log, stderr.log) with timestamps
find /usr/local/lsws/logs/ -type f \( -name "lsrestart.log.*" -o -name "security_audit.log.*" -o -name "stderr.log.*" \) | while read file; do
FILE_DATE=$(echo "$file" | grep -o "[0-9]\{4\}_[0-9]\{2\}_[0-9]\{2\}")
if [ ! -z "$FILE_DATE" ] && [ "$FILE_DATE" \< "$THREE_DAYS_AGO" ]; then
rm -f "$file"
echo "Removed old special log: $file" >> $LOG_FILE
fi
done
# Rotate current logs if they're too large (over 10MB)
for CURRENT_LOG in access.log error.log auditlog-debug.txt; do
if [ -f "/usr/local/lsws/logs/$CURRENT_LOG" ] && [ $(stat -c%s "/usr/local/lsws/logs/$CURRENT_LOG") -gt 10485760 ]; then
TODAY=$(date +"%Y_%m_%d")
mv "/usr/local/lsws/logs/$CURRENT_LOG" "/usr/local/lsws/logs/${CURRENT_LOG}.${TODAY}"
touch "/usr/local/lsws/logs/$CURRENT_LOG"
chown www-data:www-data "/usr/local/lsws/logs/$CURRENT_LOG"
echo "Rotated current log: $CURRENT_LOG (size exceeded 10MB)" >> $LOG_FILE
fi
done
echo "OpenLiteSpeed logs older than $DAYS_TO_KEEP days cleaned successfully" >> $LOG_FILE
else
echo "OpenLiteSpeed logs directory not found" >> $LOG_FILE
fi
# Clear journalctl logs
if command -v journalctl &> /dev/null; then
journalctl --vacuum-time="${DAYS_TO_KEEP}d"
echo "Journalctl logs vacuumed successfully" >> $LOG_FILE
else
echo "Journalctl command not found" >> $LOG_FILE
fi
echo "Logs cleanup completed at $(date +"%Y-%m-%d %H:%M:%S")" >> $LOG_FILE
also, even if i disabled screenshots on server it seems syslogs are getting filled by its logs, as @twest mentioned earlier..
