mirror of
https://github.com/lucaspalomodevelop/core.git
synced 2026-03-16 17:44:41 +00:00
faf650e7ca
* Syslog-NG replacement for legacy syslog local logs: Part of this commit: - support both formats in query log, which is used by our log api - sample local syslog-ng target for configd for https://github.com/opnsense/core/issues/4068 * syslog: add disable clog toggle + preserve number of log (days) setting when only using syslog-ng. for https://github.com/opnsense/core/issues/4068 * syslog: include local syslog-ng files when clog is disabled. for https://github.com/opnsense/core/issues/4068 * Syslog-NG: change local handling, add relayd file to test the concept. The local directory contains filters for local targets, which should replace the <plugin>_syslog() construction eventually, everything relevant and not matched is send to system for https://github.com/opnsense/core/issues/4068 * Syslog-NG: minor update to local template to support module/file format as the query log handler supports it (e.g. /var/log/squid/access/) and add local templates * Syslog-NG: change flush log actions to support new format, while here make sure "flush all" actuallly flushes all logs (including plugins). for https://github.com/opnsense/core/issues/4068 * Syslog-NG: missing level in system log, for https://github.com/opnsense/core/issues/4068 * fix typo for https://github.com/opnsense/core/issues/4068 * syslog-ng: filter live log support for https://github.com/opnsense/core/issues/4068 * Syslog-NG: replace diag_logs_filter_summary.php for mvc enabled version, using the same log output as live log, for https://github.com/opnsense/core/issues/4068 * Syslog-NG: add log cleanup script to enforce preservelogs setting. for https://github.com/opnsense/core/issues/4068 * Syslog-NG: webuser auth message should use LOG_AUTH facility. for https://github.com/opnsense/core/issues/4068 * Syslog-NG: ditch sshlockout_pf in favour for a small script that locks out ssh/web gui failed attempts for both IPv4 and IPv6. for https://github.com/opnsense/core/issues/4068 * ditch sshlockout_pf dependancy, for https://github.com/opnsense/core/issues/4068 * fix indent in ACL, for https://github.com/opnsense/core/issues/4068 * fix plist
63 lines
2.5 KiB
PHP
Executable File
63 lines
2.5 KiB
PHP
Executable File
#!/usr/local/bin/php
|
|
<?php
|
|
|
|
/*
|
|
* Copyright (C) 2020 Deciso B.V.
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright notice,
|
|
* this list of conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
|
|
* INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
* AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
|
* AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
|
|
* OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
|
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
|
* POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
|
|
require_once("config.inc");
|
|
require_once("system.inc");
|
|
require_once("util.inc");
|
|
require_once("interfaces.inc");
|
|
require_once("plugins.inc");
|
|
|
|
$preserve_logs = !empty($config['syslog']['preservelogs']) ? $config['syslog']['preservelogs'] : 31;
|
|
|
|
// gather all syslog created local logs (filename starts with directory name_[8 digits].log)
|
|
$relevant_logs = [];
|
|
$it = new RecursiveDirectoryIterator("/var/log");
|
|
foreach(new RecursiveIteratorIterator($it) as $file) {
|
|
if ($file->isFile()) {
|
|
$log_subject = basename($file->getPath());
|
|
if (strpos($file->getFilename(), $log_subject . "_") === 0
|
|
&& $file->getExtension() == "log"
|
|
&& ctype_digit(substr($file->getFilename(), strlen($log_subject)+1, 8))) {
|
|
if (!isset($relevant_logs[$log_subject])) {
|
|
$relevant_logs[$log_subject] = [];
|
|
}
|
|
$relevant_logs[$log_subject][] = (string)$file;
|
|
}
|
|
}
|
|
}
|
|
// remove expired logs
|
|
foreach ($relevant_logs as $log_subject => $items) {
|
|
if (count($items) > $preserve_logs) {
|
|
rsort($items);
|
|
foreach (array_slice($items, $preserve_logs) as $filename) {
|
|
@unlink($filename);
|
|
}
|
|
}
|
|
}
|