too huge raw_logs

[sine]

Hello,
I am using debian linux with 2.6.18-4-686 kernel. My problem is with
a very big log file. I checked this log file in database, but I didn't found anything interesting. Do you have any idea?

# ls -al raw_logs.*
-rw-rw---- 1 zimbra zimbra 8758 2007-07-13 10:29 raw_logs.frm
-rw-rw---- 1 zimbra zimbra 13268923576 2007-08-10 12:28 raw_logs.MYD
-rw-rw---- 1 zimbra zimbra 5418236928 2007-08-10 12:28 raw_logs.MYI

[jholder]

What version of Zimbra are you running?
if you're running 4.5.6, then please file a bug on that.

[mrball]

Same here:

$ ls logger/db/data/zimbra_logger/raw_logs.* -al
-rw-rw---- 1 zimbra zimbra 5726844856 Oct 18 06:14 logger/db/data/zimbra_logger/raw_logs.MYD
-rw-rw---- 1 zimbra zimbra 1615306752 Oct 18 06:14 logger/db/data/zimbra_logger/raw_logs.MYI
-rw-rw---- 1 zimbra zimbra 8758 Apr 19 23:34 logger/db/data/zimbra_logger/raw_logs.frm

I'm on 4.5.7, and it seems the size has only recently started to increase aggressively.

[jholder]

I couldn't find a bug on that one. Can you file a bug?

[padraig]

are your spam graphs working ok?

[dwmtractor]

I'm on 4.5.8 and while my logs aren't microminiature, they certainly aren't hitting gigabyte size. . .

root@mail:/opt/zimbra/logger/db/data/zimbra_logger# ls raw* -l
-rw-rw---- 1 zimbra zimbra 8758 2007-07-26 11:24 raw_logs.frm
-rw-rw---- 1 zimbra zimbra 8598644 2007-10-18 07:00 raw_logs.MYD
-rw-rw---- 1 zimbra zimbra 3683328 2007-10-18 10:20 raw_logs.MYI
root@mail:/opt/zimbra/logger/db/data/zimbra_logger#

[ladylinux]

Hi,

I have huge logs also ..

-rw-rw---- 1 zimbra zimbra 24G Dec 23 01:44 raw_logs.MYD
-rw-rw---- 1 zimbra zimbra 6.3G Dec 23 01:44 raw_logs.MYI


This can't be right ???

4.5.10 version here ..

And load is up on processing these ..

Francesca

[mmorse]

su - zimbra
logmysql zimbra_logger
mysql> check table raw_logs;

Check your /tmp/logprocess.out to see if it's doing a decent amount of processing, finding, inserting, deleting, aggregating, retaining, pruning, and optimizing (wow that's a mouthful).

Also check /opt/zimbra/logger/db/data/hostname.err

zmprov gacf | grep zimbraLogRawLifetime
zmprov gacf | grep zimbraLogSummaryLifetime
-I believe the defaults are 31d & 730d respectively.

You could try manually manually running /opt/zimbra/libexec/zmlogprocess

[ladylinux]

Hi,

I found another post here and truncated the logging tables and rebuilt them. Things are just fine now.

Thanks!!

Francesca

[G00FIN42]

I am have same issue, suddenly running low on drive space and mistakenly thought I was just storing too many backups until I saw this thread and checked out directory and saw I had very large rawlogs.myi etc.


Thank you in advance for the 411.