Do you rotate your ssl_error.log? If so, how are you doing it?

David Smith

I have found that because TS doesn't naturally rotate its SSL logs, they are growing to a ginormous size, and I would like to create a rotation config for these logs, but I'm not sure if/where I can do that or if I have to create my own rotation script for them. Has anyone done it on Linux?

nipper

Some of the logs require JBOSS or TS to be down. I have never had to worry about the SSL logs, so I am not certain if they fall into that mode.

I schedule some downtime to run a script to roll the logs, pretty easy

David Smith

Gracias, my friend.

Les Bleus

Are you talking about iwwebd logs?

David Smith

No I was talking about the ssl_error.log, ssl_request.log, and ssl_transfer.log. I figured it out - we already have a shell script that runs via cron to rotate most of the other logs that aren't auto-rotated in TeamSite. I added these to the list of logs it rotates and verified that it works.

Les Bleus

Those are coming from Apache iw-webd. You can edit iwwebd.conf.template and add apache rotatelogs -l commands where needed. I just did in one environment and I'm able to see new logs(ssl_request.log.2019.03.20, ssl_transfer.log.2019.03.20 …). I had install missing 32bit libraries though.

David Smith

That's a great hint - thank you. I'll take a look at that.

HeatherH

We have a KB on how to use rotatelogs in the iwwebd.conf.template, Dave:
https://knowledge.opentext.com/knowledge/cs.dll/kcs/kbarticle/view/KB3913398

David Smith

Thank you