Scalyr Agent Syslog Rotation

Introduction

If you have configured the Scalyr Agent’s syslog monitor and are working with a high volume data source, it may be advantageous to update your file rotation settings. By default, the Scalyr Agent buffers syslog data to disk and rotates the file (defined by the message_log parameter) twice after it reaches 20MB in size. Filenames follow the format of

• message_log_filename (current 20MB syslog data block)
• message_log_filename.1 (rotation 1)
• message_log_filename.2 (rotation 2)

Configuration

You can modify the syslog buffer size and log rotations on a per-monitor or global basis in the agent.json configuration file:

By Monitor

Globally

Set the rotation parameters with the following: