Cannot collect rotated syslog.1 or syslog.2.gz by sosreport. If syslog is rotated daily, syslog only contains logs in less than 24 hours.
I expect sosreport collects syslog and syslog.1 to see logs at least for 24 hours. Or it would be nice if sosreport has options to switch to collect old logs or not.
====
$ sudo logrotate -f /etc/logrotate.conf
$ ls -alF /var/log/syslog*
-rw-r----- 1 syslog adm 1984 Aug 13 16:12 /var/log/syslog
-rw-r----- 1 syslog adm 30816 Aug 13 16:11 /var/log/syslog.1
-rw-r----- 1 syslog adm 1332 Aug 13 15:55 /var/log/syslog.2.gz
-rw-r----- 1 syslog adm 6095 Aug 13 15:43 /var/log/syslog.3.gz
$ sudo sosreport -a -l | grep logs
logs Basic system information for Debian based distributions
logs Basic system information for Ubuntu based distributions
apache.log on gathers all apache logs
auditd.logsize 15 maximum size (MiB) of logs to collect
logs.logsize 15 max size (MiB) to collect per syslog file
logs.all_logs on collect all log files defined in syslog.conf
logs.logsize 15 max size (MiB) to collect per syslog file
logs.all_logs on collect all log files defined in syslog.conf
nscd.nscdlogsize 50 max size (MiB) to collect per nscd log file
openstack-cinder.log on gathers openstack cinder logs
openstack-glance.log on gathers openstack-glance logs
openstack-keystone.log on gathers openstack keystone logs
openstack-swift.log on gathers openstack-swift logs
$ sudo sosreport -a --batch
$ sudo tar tf /tmp/sosreport-nobuto-local-machine-1-20140813161158.tar.xz | grep syslog
sosreport-nobuto-local-machine-1-20140813161158/var/log/juju/rsyslog-cert.pem
sosreport-nobuto-local-machine-1-20140813161158/var/log/juju/rsyslog-key.pem
sosreport-nobuto-local-machine-1-20140813161158/var/log/syslog
sosreport-nobuto-local-machine-1-20140813161158/etc/logrotate.d/rsyslog
sosreport-nobuto-local-machine-1-20140813161158/etc/rsyslog.conf
sosreport-nobuto-local-machine-1-20140813161158/etc/default/rsyslog
sosreport-nobuto-local-machine-1-20140813161158/etc/init/rsyslog.conf
^ syslog.1 is not collected.
ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: sosreport 3.1-1ubuntu2
ProcVersionSignature: User Name 3.16.0-6.11-generic 3.16.0-rc7
Uname: Linux 3.16.0-6-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.2
Architecture: amd64
Date: Wed Aug 13 15:52:09 2014
Dependencies: python3-six 1.5.2-1
ProcEnviron:
TERM=xterm
PATH=(custom, no user)
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: sosreport
UpgradeStatus: No upgrade log present (probably fresh install)
Cannot collect rotated syslog.1 or syslog.2.gz by sosreport. If syslog is rotated daily, syslog only contains logs in less than 24 hours.
I expect sosreport collects syslog and syslog.1 to see logs at least for 24 hours. Or it would be nice if sosreport has options to switch to collect old logs or not.
==== syslog. 2.gz syslog. 3.gz
$ sudo logrotate -f /etc/logrotate.conf
$ ls -alF /var/log/syslog*
-rw-r----- 1 syslog adm 1984 Aug 13 16:12 /var/log/syslog
-rw-r----- 1 syslog adm 30816 Aug 13 16:11 /var/log/syslog.1
-rw-r----- 1 syslog adm 1332 Aug 13 15:55 /var/log/
-rw-r----- 1 syslog adm 6095 Aug 13 15:43 /var/log/
$ sudo sosreport -a -l | grep logs cinder. log on gathers openstack cinder logs glance. log on gathers openstack-glance logs keystone. log on gathers openstack keystone logs swift.log on gathers openstack-swift logs
logs Basic system information for Debian based distributions
logs Basic system information for Ubuntu based distributions
apache.log on gathers all apache logs
auditd.logsize 15 maximum size (MiB) of logs to collect
logs.logsize 15 max size (MiB) to collect per syslog file
logs.all_logs on collect all log files defined in syslog.conf
logs.logsize 15 max size (MiB) to collect per syslog file
logs.all_logs on collect all log files defined in syslog.conf
nscd.nscdlogsize 50 max size (MiB) to collect per nscd log file
openstack-
openstack-
openstack-
openstack-
$ sudo sosreport -a --batch nobuto- local-machine- 1-2014081316115 8.tar.xz | grep syslog nobuto- local-machine- 1-2014081316115 8/var/log/ juju/rsyslog- cert.pem nobuto- local-machine- 1-2014081316115 8/var/log/ juju/rsyslog- key.pem nobuto- local-machine- 1-2014081316115 8/var/log/ syslog nobuto- local-machine- 1-2014081316115 8/etc/logrotate .d/rsyslog nobuto- local-machine- 1-2014081316115 8/etc/rsyslog. conf nobuto- local-machine- 1-2014081316115 8/etc/default/ rsyslog nobuto- local-machine- 1-2014081316115 8/etc/init/ rsyslog. conf
$ sudo tar tf /tmp/sosreport-
sosreport-
sosreport-
sosreport-
sosreport-
sosreport-
sosreport-
sosreport-
^ syslog.1 is not collected.
ProblemType: Bug ature: User Name 3.16.0-6.11-generic 3.16.0-rc7
DistroRelease: Ubuntu 14.04
Package: sosreport 3.1-1ubuntu2
ProcVersionSign
Uname: Linux 3.16.0-6-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.2
Architecture: amd64
Date: Wed Aug 13 15:52:09 2014
Dependencies: python3-six 1.5.2-1
ProcEnviron:
TERM=xterm
PATH=(custom, no user)
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: sosreport
UpgradeStatus: No upgrade log present (probably fresh install)