I can see syslog only from today...where can I get syslogs from previous days?

 

 

Thanks

 

 

The syslog is only kept while the system is up. When you shut down (or crash) the system the syslog is gone. A new fresh syslog is started at each boot. If you want to keep archives of your syslogs you are going to need to set up a script to copy them to an array (or cache) drive at various intervals.

In addition, the syslog file is rotated out to /var/log/syslog.1  (and possibly /var/log/syslog.2) once it grows over a certain size.

 

You might find the older records there.  As already mentioned, these files are in an in-RAM file-system, so all files under /var/log are lost when you reboot unless you copy them elsewhere first prior to a reboot.

 

Joe L.

Which script is responsible for the reboot operation? Where do I put copy command line?

 

Or maybe it is possible to change syslog destination directory and force it to write into disk1?