Crowd (tomcat) access logs loosing contents as they rotate daily

[Arun Sharma]

Hi,

We are noticing that our crowd (tomcat) access logs are getting converted into 1 KB files everyday as they rotate. Only the current day log retains all the data.

once it rotates (i.e. gets the date appended to it), it looses all its contents except first 4-5 lines

Below is the snippet of AccessLogValve from the server.xml, 

<Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs" prefix="crowd_access_log." suffix=".log" pattern="%a %t %I &quot; %m %U%q %H &quot; %s %b %D &quot; %a &quot; %D %F" resolveHosts="false" />

Any suggestions will be really appreciated.

Thank you,
Arun Sharma

[Reneesh Kottakkalathil]

Hi Arun,

If all configs are same between prod and non prod, then one of reason you don't see the issue in non prod is may be there is no enough load in non prod to write into access Logs. Just a thought may be you already aware of it. 

Have you checked crontab for any custom log rotation scripts that may be setup and causing this issue.

[Reneesh Kottakkalathil]

What is the version of crowd running?

[Arun Sharma]

Hi Reneesh,

Its 2.11.1

The issue is there from more than a year. 

Server.xml content matches with that of other instances,. And it is working fine for them

[Reneesh Kottakkalathil]

So you have crowd running as cluster with this issue on one server in the cluster? Check the user crowd is running as and check the crontab for any logs rotation script setup.

[Arun Sharma]

Hi Reneesh,

It is a single server, not in cluster. From other instances I meant that non prod environments.

The issue is only in production environment, that is why we are not playing around with it to see what is going wrong, all the configs look exactly the same to non-prods and the non-prods work fine.

Appreciate your help on this.

Thank you,
Arun Sharma