我发现我的分区挂载为/ var已经填满了.在追踪磁盘使用情况时,我发现我的Nginx日志文件很大,而且似乎没有写入正确的文件.
/ var / log / nginx中的ls -ltr给了我这个：
total 17170060
-rw-r----- 1 nobody adm 112315467 Apr 28 2015 access.log.14.gz
-rw-r----- 1 nobody adm 70554720 Apr 29 2015 access.log.13.gz
-rw-r----- 1 nobody adm 68145066 Apr 30 2015 access.log.12.gz
-rw-r----- 1 nobody adm 77951766 Dec 7 06:25 access.log.10.gz
-rw-r----- 1 nobody adm 81764378 Dec 8 06:25 access.log.9.gz
-rw-r----- 1 nobody adm 75397419 Dec 9 06:25 access.log.8.gz
-rw-r----- 1 nobody adm 68738862 Dec 10 06:25 access.log.7.gz
-rw-r----- 1 nobody adm 73802613 Dec 11 06:25 access.log.6.gz
-rw-r----- 1 nobody adm 66144521 Dec 12 06:25 access.log.5.gz
-rw-r----- 1 nobody adm 65385900 Dec 13 06:25 access.log.4.gz
-rw-r----- 1 nobody adm 68117105 Dec 14 06:25 access.log.3.gz
-rw-r----- 1 nobody adm 69441057 Dec 15 06:25 access.log.2.gz
-rw-r----- 1 nobody adm 0 Jan 20 06:25 access.log
-rw-r----- 1 nobody adm 7762196 Feb 1 09:45 error.log
-rw-r----- 1 nobody adm 16676558550 Feb 1 10:24 access.log.1
如您所见,access.log.1是要写入的文件.
这是我的/etc/logrotate.d/nginx脚本：
/var/log/nginx/*.log {
daily
size 1G
missingok
rotate 10
compress
delaycompress
notifempty
create 0640 nobody adm
sharedscripts
prerotate
if [ -d /etc/logrotate.d/httpd-prerotate ]; then run-parts /etc/logrotate.d/httpd-prerotate; fi endscript
postrotate
[ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
endscript
}
/etc/nginx/nginx.conf中的相关行：
pid /var/run/nginx.pid;
...snip...
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
UPDATE
当我今天早上检查时,同样的问题正在发生.我从命令行执行了服务nginx重载,它发布了旧文件并开始写入新文件.根据this post和我的观察,我已经取代了
[ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
同
service nginx reload >/dev/null 2>&1
在/etc/logrotate.d/nginx脚本中.
如果成功,我会报告回来.
解决方法:
第一天
按照我在OP中提到的那样对我的/etc/logrotate.d/nginx脚本进行了更改…
/var/log/nginx/*.log {
daily
size 1G
missingok
rotate 10
compress
delaycompress
notifempty
create 0640 nobody adm
sharedscripts
prerotate
if [ -d /etc/logrotate.d/httpd-prerotate ]; then run-parts /etc/logrotate.d/httpd-prerotate; fi endscript
postrotate
service nginx reload >/dev/null 2>&1
endscript
}
… access.log已正确重命名为access.log.1,已发布,然后开始写入新的access.log.但是,它没有gzip access.log.1.
第二天
access.log.1文件变为access.log.2并被gzip压缩.我猜测delaycompress指令是将日志文件解压缩到第二天的原因. ls -ltr给我这个输出：
total 3344744
-rw-r----- 1 nobody adm 68738862 Dec 10 06:25 access.log.10.gz
-rw-r----- 1 nobody adm 73802613 Dec 11 06:25 access.log.9.gz
-rw-r----- 1 nobody adm 66144521 Dec 12 06:25 access.log.8.gz
-rw-r----- 1 nobody adm 65385900 Dec 13 06:25 access.log.7.gz
-rw-r----- 1 nobody adm 68117105 Dec 14 06:25 access.log.6.gz
-rw-r----- 1 nobody adm 69441057 Dec 15 06:25 access.log.5.gz
-rw-r----- 1 nobody adm 748290175 Feb 1 10:50 access.log.4.gz
-rw-r----- 1 nobody adm 58575628 Feb 2 08:32 access.log.3.gz
-rw-r----- 1 nobody adm 85585414 Feb 3 06:25 access.log.2.gz
-rw-r----- 1 nobody adm 8779427 Feb 4 02:39 error.log
-rw-r----- 1 nobody adm 2023509844 Feb 4 06:25 access.log.1
-rw-r----- 1 nobody adm 88608092 Feb 4 09:17 access.log
【说明】：本文章由站长整理发布，文章内容不代表本站观点，如文中有侵权行为，请与本站客服联系(QQ:254677821)！