conf/logback.xml: Rotate logs

[ilyaglow]

Rotate logs

Request Type

Feature Request

Problem Description

Hey there,

Currently Cortex do not limit application.log file size, so it can became really huge, causing Cortex to freeze when no free space left (this is especially a Docker version problem).

Possible Solutions

This is the solution that I came so far, inspired by the following gist: https://gist.github.com/jcraane/5921329

<?xml version="1.0" encoding="UTF-8"?>
<configuration debug="false">

	<conversionRule conversionWord="coloredLevel"
		converterClass="play.api.libs.logback.ColoredLevel" />

	<appender name="FILE" class="ch.qos.logback.core.rolling.RollingFileAppender">
		<file>${application.home:-.}/logs/application.log</file>
        <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
            <fileNamePattern>${application.home:-.}/logs/application_%d{yyyy-MM-dd}.%i.log</fileNamePattern>

            <timeBasedFileNamingAndTriggeringPolicy class="ch.qos.logback.core.rolling.SizeAndTimeBasedFNATP">
                <maxFileSize>10MB</maxFileSize>
            </timeBasedFileNamingAndTriggeringPolicy>
            <maxHistory>30</maxHistory>
        </rollingPolicy>
	<encoder>
		<pattern>%date [%level] from %logger in %thread - %message%n%xException</pattern>
	</encoder>
	</appender>

	<appender name="STDOUT" class="ch.qos.logback.core.ConsoleAppender">
		<encoder>
			<pattern>%coloredLevel %logger{15} - %message%n%xException{10}
			</pattern>
		</encoder>
	</appender>

	<appender name="ASYNCFILE" class="ch.qos.logback.classic.AsyncAppender">
		<appender-ref ref="FILE" />
	</appender>

	<appender name="ASYNCSTDOUT" class="ch.qos.logback.classic.AsyncAppender">
		<appender-ref ref="STDOUT" />
	</appender>

	<logger name="play" level="INFO" />
	<logger name="application" level="INFO" />

	<logger name="com.gargoylesoftware.htmlunit.javascript" level="OFF" />

	<root level="INFO">
		<appender-ref ref="ASYNCFILE" />
		<appender-ref ref="ASYNCSTDOUT" />
	</root>

</configuration>

It will rotate log every day and set the maximum size of it to 10MB. Max history time is set to 30 days.

What do you think?

[nadouani]

Yes, this is valid for both Cortex and TheHive. The default logback.xml file we ship with the packages doesn't enable log rotation, we should probably add a section about this on the FAQ.

Thanks for sharing

[suv1sh]

what if I want to only rotate the logs only after it reaches a certain size let say 5MB and it gets saved in archive directory and again it starts rotating the logs