Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 260

Logs
If you configure for buffered logging, the server creates buffers for the corresponding logs,
and it holds the messages in these buffers for as long as possible. The server flushes out the
messages to the log files only when either of the following conditions occurs:
• The buffer gets full—the buffer gets full when the buffer size is equal to or greater than
the value specified by the
this parameter is 512 KB.
• The flush interval for the buffer is reached—the flush interval is reached when the time
interval since the last buffer flush is equal to or greater than the value specified by the
flushInterval
seconds.
• When current logs are read from CS console—the server retrieves the latest log when it
is queried for current logs.
If you configure the server for unbuffered logging, the server flushes out messages as they
are generated to the log files. Because the server performs an I/O operation (writing to the
log file) each time a message is generated, configuring the server for unbuffered logging
decreases performance.
Log File Rotation
Log files are rotated when either of the following occur:
• The size limit for the corresponding file is reached—the size of the corresponding log
file is equal to or greater than the value specified by the
parameter. The default value for this parameter is 100 KB.
• The age limit for the corresponding file is reached—the corresponding log file is equal
to or older than the interval specified by the
parameter. The default value for this parameter is 2592000 seconds (every hour).
When a log file is rotated, the old file is named using the name of the file with an appended
time stamp. The appended time stamp is an integer that indicates the date and time the
corresponding active log file was rotated. The date and time have the forms YYYYMMDD
(Year, Month, Day) and
Log files, especially the audit log file, contain critical information. So it is good practice to
periodically archive rotated log files to some archive media. You can archive log files by
copying the entire
CS does not provide any tool or utility for archiving log files. Use the tools or utilities that
your operating system provides for archiving.
CS does, however, provide a command-line utility, called
sign log files before archiving them. This gives you a means of tamper detection. For
details, see "Signing Log Files" on page 266.
260 Red Hat Certificate System Administrator's Guide • September 2005
bufferSize
configuration parameter. The default value for this parameter is 5
(Hour, Minute, Second), in that order.
HHmmSS
directory to your archive media.
log
configuration parameter. The default value for
maxFileSize
rolloverInterval
signtool
configuration
configuration
, that allows you to