I have read up on the basics of using syslog and logrotate to log and rotate my system logs. I have also read the basics of how to make the Cisco PIX send logging information to my syslog server. When turning this on from the PIX, it immediately starts logging to the syslog server (I’ve already enabled the remote logging ability for syslog) but it logs everything to /var/log/messages.
My problem/question is that I’d like to have the PIX logs in a separate file, one that gets rotated daily at midnight. In addition to that, I’d like it to append the date as the suffix of the log’s filename, such as PIX20020815. I would also prefer that the logs were automatically deleted after say, 3 months.
If anyone can give me details on this, or if anyone else has already set this up for their PIX, I’d greatly appreciate some examples.