How To Limit The Growth Of UNIX / Linux Log Files

Q. My log files grow continuously. How do I limit the growth of UNIX log files stored in /usr/spool/ or /var/log/ directory?

A. The log files could be the only source of information available to trace a problem or security issues. Log files keep growing every day as new logging data are appended onto existing log files. If you failed to manage log files, it will eat out disk space and no space will be left on filesystem to store user data. To avoid such problems try following solutions:

Keep log files in a separate filesystem

Never ever store /var/log or /var/adm and all other location on a / (root) filesysem. Always store all log files on a separate filesystem to maintain the security, integrity and performance of the system.

Control the growth of system log files

There are varios approaches to control the growth of system log files.

Option # 1: Manually truncate log file

Use any one of the following command to truncate log file:
# >/var/log/log.file
OR
# cat /dev/null > /usr/adm/log.file

Option # 2: Automatically truncate log file

You need to keep several old versions of a log file in the system by periodically deleting the oldest one, renaming the current one, and then recreating it. This can be done by using a shell script or using automated tool such as logrotate.