Hi all, in my nethsecurity the 16GB data partition is pretty full the most is used by logs. The logs are rotated weekly with a retention policy (rotate) of 26 weeks. We have a 150/200 clients in the network.
In your experience the data partition is too small?
Further in my logrotate data.conf I can see the option delaycompress. Should be a good practice to remove it to retain only one week of uncompressed logs? And what about activating the maxsize option?
Furthermore I’ve seen that the most logs are generated by dnsmasq (now for example my /mnt/data/log/messages is 2.3GB but 2.2GB are generated by dnsmasq). There is a way to drive dnsmasq to log less?
For a network with 150 to 200 clients 16 GB can fill up pretty quickly especially with 26 weeks of log retention. I wouldd suggest to start by reducing the retention period if you do not need to keep logs that long. Since dnsmasq is generating most of the logs it is also worth checking if verbose or query logging is enabled. Turning that off if it is not needed, can free up a lot of space. Enabling maxsize is another good idea to stop individual log files from growing too large.
Thank you very much, “Log DNS queries” was enabled, I have disable it. Can I ask you if in your opinion Log DNS query was a default option or I have erroneously enabled it in the past?
