Why Log rotation script in Bash Scripting? - Purpose & Use Cases

The Big Idea

What if your server crashes because you forgot to clean logs? A log rotation script can save you from that nightmare.

The Scenario

Imagine you have a busy website or app that creates log files every day. These logs keep growing and growing, filling up your disk space. You try to clean them up by hand, opening folders, deleting old files, and renaming others.

The Problem

Doing this manually is slow and boring. You might forget to delete some files or accidentally remove important logs. It's easy to make mistakes, and if you miss cleaning logs on time, your system can run out of space and crash.

The Solution

A log rotation script automatically manages your log files. It renames old logs, compresses them to save space, and deletes the oldest ones. This keeps your system tidy without you lifting a finger.

Before vs After

✗ Before

rm /var/log/app.log.1
mv /var/log/app.log /var/log/app.log.1

✓ After

logrotate /etc/logrotate.d/app

What It Enables

With log rotation scripts, your system stays healthy and you save time, avoiding manual cleanup and unexpected crashes.

Real Life Example

Web servers like Apache or Nginx generate huge logs daily. Using log rotation scripts, these logs are automatically archived and cleaned, so the server never runs out of disk space.

Key Takeaways

Manual log cleanup is slow and risky.

Log rotation scripts automate archiving and deleting old logs.

This keeps systems stable and saves your time.

Practice

1. What is the main purpose of a log rotation script in bash?

easy

A. To archive old log files and start new ones to prevent disk space issues

B. To delete all log files permanently

C. To create new log files without removing old ones

D. To convert log files into executable scripts

Solution

1. Step 1: Understand log rotation purpose

   Log rotation scripts archive old logs and create fresh logs to avoid disk space overflow.

2. Step 2: Compare options

   Only To archive old log files and start new ones to prevent disk space issues describes archiving old logs and starting new ones, which matches the purpose.

3. Final Answer:

   To archive old log files and start new ones to prevent disk space issues -> Option A

4. Quick Check:

   Log rotation = archive old + new logs [OK]

Hint: Log rotation means archiving old logs and starting fresh ones [OK]

Common Mistakes:

• Thinking log rotation deletes all logs
• Believing it only creates new logs without archiving
• Confusing log rotation with script conversion

2. Which of the following bash commands correctly appends the current date to a log filename for rotation?

easy

A. mv logfile.log logfile-date.log

B. mv logfile.log logfile-$(date +%Y-%m-%d).log

C. mv logfile.log logfile-$(date +%H:%M:%S).log

D. mv logfile.log logfile-$(date +%Y/%m/%d).log

Solution

1. Step 1: Understand date format for filenames

   Using $(date +%Y-%m-%d) produces a safe filename format like 2024-06-01.

2. Step 2: Check each option

   mv logfile.log logfile-$(date +%Y-%m-%d).log uses dashes which are safe in filenames. mv logfile.log logfile-date.log uses literal 'date', not dynamic. mv logfile.log logfile-$(date +%H:%M:%S).log uses colons which are invalid in filenames on many systems. mv logfile.log logfile-$(date +%Y/%m/%d).log uses slashes which are directory separators, invalid in filenames.

3. Final Answer:

   mv logfile.log logfile-$(date +%Y-%m-%d).log -> Option B

4. Quick Check:

   Date format with dashes = safe filename [OK]

Hint: Use date with dashes, avoid colons or slashes in filenames [OK]

Common Mistakes:

• Using colons or slashes in filenames
• Not using command substitution for date
• Using literal text instead of date command

3. Given this snippet in a log rotation script:

gzip logfile-$(date +%Y-%m-%d).log
ls logfile-*.log.gz | wc -l

What will the wc -l command output if there are 3 compressed log files matching the pattern?

medium

A. Error: No such file or directory

B. 0

C. 1

D. 3

Solution

1. Step 1: Understand the commands

   The gzip command compresses a log file, creating a file ending with .gz. The ls logfile-*.log.gz lists all compressed log files matching the pattern.

2. Step 2: Count matching files

   If there are 3 compressed log files, ls outputs 3 lines. Piping to wc -l counts these lines, so output is 3.

3. Final Answer:

   3 -> Option D

4. Quick Check:

   Count of compressed logs = 3 [OK]

Hint: Count lines from ls output to get number of files [OK]

Common Mistakes:

• Assuming gzip outputs count
• Thinking wc -l counts characters
• Expecting error if files exist

4. Identify the error in this log rotation snippet:

mv logfile.log logfile-$(date +%Y-%m-%d).log
gzip logfile-$(date +%Y-%m-%d).log
rm logfile.log

medium

A. The date format uses slashes which are invalid

B. The gzip command is missing the -d option

C. The rm logfile.log command deletes the original log after moving, causing error

D. The mv command should use cp instead

Solution

1. Step 1: Analyze the commands order

   The mv command renames logfile.log to logfile-date.log, so logfile.log no longer exists after this.

2. Step 2: Check the rm command

   After moving, rm logfile.log tries to delete a file that was already moved, causing an error or no effect.

3. Final Answer:

   The rm logfile.log command deletes the original log after moving, causing error -> Option C

4. Quick Check:

   Deleting moved file causes error [OK]

Hint: Don't delete a file after moving it; it's already renamed [OK]

Common Mistakes:

• Deleting a file after moving it
• Confusing gzip options
• Using invalid date formats

5. You want to write a log rotation script that keeps only the last 5 compressed log backups and deletes older ones. Which bash command snippet correctly deletes older backups?

hard

A. ls -1t logfile-*.log.gz | tail -n +6 | xargs rm -f

B. ls -1t logfile-*.log.gz | head -n +6 | xargs rm -f

C. ls -1 logfile-*.log.gz | tail -n 5 | xargs rm -f

D. ls logfile-*.log.gz | grep -v 'logfile-*.log.gz' | xargs rm -f

Solution

1. Step 1: Understand the command parts

   ls -1t lists files sorted by modification time, newest first. tail -n +6 outputs lines starting from line 6, i.e., files older than the 5 newest. xargs rm -f deletes those files.

2. Step 2: Check other options

   ls -1t logfile-*.log.gz | head -n +6 | xargs rm -f deletes the first 6 newest files (wrong). ls -1 logfile-*.log.gz | tail -n 5 | xargs rm -f deletes last 5 files by name order, not time. ls logfile-*.log.gz | grep -v 'logfile-*.log.gz' | xargs rm -f uses grep incorrectly and does not select older files.

3. Final Answer:

   ls -1t logfile-*.log.gz | tail -n +6 | xargs rm -f -> Option A

4. Quick Check:

   Keep 5 newest, delete older = tail from 6th [OK]

Hint: Use ls -t and tail +6 to delete older files beyond 5 [OK]

Common Mistakes:

• Using head instead of tail to select files
• Deleting newest files instead of oldest
• Not sorting files by modification time