1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169

(root)@sys-ubuntu:/var/log# ls -l /var
total 52
drwxr-xr-x  3 root root  4096 2010-03-04 06:51 backups
drwxr-xr-x 12 root root  4096 2009-08-24 23:52 cache
drwxr-xr-x  2 root root  4096 2009-06-13 23:51 crash
drwxr-xr-x 51 root root  4096 2009-12-05 12:52 lib
drwxrwsr-x  2 root staff 4096 2008-10-20 08:27 local
drwxrwxrwt  4 root root   120 2010-03-04 06:51 lock
drwxr-xr-x 14 root root  4096 2010-03-04 06:51 log
drwxrwsr-x  2 root mail  4096 2008-12-02 10:20 mail
drwxr-xr-x  2 root root  4096 2008-12-02 10:20 opt
drwxr-xr-x  3 root root  4096 2010-02-07 18:54 packages
drwxr-xr-x  3 root root  4096 2009-08-24 23:52 rails
drwxr-xr-x 15 root root   700 2010-03-04 14:12 run
drwxr-xr-x  9 root root  4096 2010-02-07 18:49 spool
drwxrwxrwt  2 root root  4096 2010-03-04 06:51 tmp
drwxr-xr-x  3 root root  4096 2009-02-27 13:15 www
(root)@sys-ubuntu:/var/log# ls -l /var/log
total 16120
drwxr-x--- 2 root   adm       4096 2010-03-01 06:40 apache2
drwxr-xr-x 2 root   root      4096 2010-03-01 06:40 apt
-rw-r--r-- 1 root   root       947 2010-03-03 23:19 aptitude
-rw-r--r-- 1 root   root       689 2010-02-27 00:37 aptitude.1.gz
-rw-r--r-- 1 root   root      1017 2010-01-29 09:00 aptitude.2.gz
-rw-r--r-- 1 root   root       808 2009-12-30 03:34 aptitude.3.gz
-rw-r--r-- 1 root   root      1203 2009-11-30 11:57 aptitude.4.gz
-rw-r--r-- 1 root   root       972 2009-11-18 11:49 aptitude.5.gz
-rw-r--r-- 1 root   root      1375 2009-07-31 10:31 aptitude.6.gz
-rw-r----- 1 syslog adm     379451 2010-03-04 14:10 auth.log
-rw-r----- 1 syslog adm     609972 2010-02-28 06:47 auth.log.0
-rw-r----- 1 syslog adm      43852 2010-02-21 06:49 auth.log.1.gz
-rw-r----- 1 syslog adm      46402 2010-02-14 06:48 auth.log.2.gz
-rw-r----- 1 syslog adm      45843 2010-02-07 06:50 auth.log.3.gz
-rw-r----- 1 syslog adm      36304 2009-08-02 06:47 auth.log.4.gz
-rw-r----- 1 syslog adm      35556 2009-07-26 06:47 auth.log.5.gz
-rw-r----- 1 root   adm         31 2008-12-02 10:21 boot
-rw-rw---- 1 root   utmp         0 2010-03-01 06:40 btmp
-rw-rw---- 1 root   utmp         0 2010-02-01 06:43 btmp.1
drwxr-xr-x 2 root   root      4096 2009-04-29 11:57 ConsoleKit
-rw-r----- 1 syslog adm     120309 2010-03-04 14:10 cron.log
-rw-r----- 1 syslog adm     195299 2010-02-28 06:47 cron.log.0
-rw-r----- 1 syslog adm      10688 2010-02-21 06:47 cron.log.1.gz
-rw-r----- 1 syslog adm      10631 2010-02-14 06:47 cron.log.2.gz
-rw-r----- 1 syslog adm      10990 2010-02-07 06:50 cron.log.3.gz
-rw-r----- 1 syslog adm    3281557 2010-03-04 14:13 daemon.log
-rw-r----- 1 syslog adm    1960657 2010-03-04 06:51 daemon.log.0
-rw-r----- 1 syslog adm     124333 2010-03-02 06:28 daemon.log.1.gz
-rw-r----- 1 syslog adm      63696 2010-02-28 06:49 daemon.log.2.gz
-rw-r----- 1 syslog adm     126675 2010-02-27 06:28 daemon.log.3.gz
-rw-r----- 1 syslog adm     129513 2010-02-25 06:52 daemon.log.4.gz
-rw-r----- 1 syslog adm     131039 2010-02-23 06:41 daemon.log.5.gz
-rw-r----- 1 syslog adm     132970 2010-02-20 06:43 daemon.log.6.gz
-rw-r----- 1 syslog adm    2744608 2010-03-04 14:06 debug
-rw-r----- 1 syslog adm       9775 2010-02-07 06:47 debug.0
-rw-r----- 1 syslog adm       1950 2010-01-17 06:47 debug.1.gz
-rw-r----- 1 syslog adm       3245 2009-12-06 06:47 debug.2.gz
-rw-r----- 1 syslog adm       1912 2009-11-29 06:47 debug.3.gz
drwxr-xr-x 2 root   root      4096 2009-04-29 11:58 dist-upgrade
-rw-r----- 1 root   adm      36094 2010-02-05 09:16 dmesg
-rw-r----- 1 root   adm      35881 2010-01-14 10:40 dmesg.0
-rw-r----- 1 root   adm      10756 2009-12-05 00:13 dmesg.1.gz
-rw-r----- 1 root   adm      10758 2009-12-05 00:04 dmesg.2.gz
-rw-r----- 1 root   adm      10346 2009-12-04 23:51 dmesg.3.gz
-rw-r----- 1 root   adm      10330 2009-11-24 12:31 dmesg.4.gz
-rw-r----- 1 root   adm       2186 2010-03-03 23:19 dpkg.log
-rw-r----- 1 root   adm      41283 2010-02-27 00:37 dpkg.log.1
-rw-r----- 1 root   adm       2490 2009-03-31 08:39 dpkg.log.10.gz
-rw-r----- 1 root   adm        493 2009-03-06 07:12 dpkg.log.11.gz
-rw-r----- 1 root   adm       2388 2009-02-28 00:07 dpkg.log.12.gz
-rw-r----- 1 root   adm       2722 2010-01-29 09:00 dpkg.log.2.gz
-rw-r----- 1 root   adm       2471 2009-12-30 03:34 dpkg.log.3.gz
-rw-r----- 1 root   adm       4064 2009-11-28 00:09 dpkg.log.4.gz
-rw-r----- 1 root   adm      10373 2009-11-18 11:49 dpkg.log.5.gz
-rw-r----- 1 root   adm       6361 2009-07-30 23:08 dpkg.log.6.gz
-rw-r----- 1 root   adm       9133 2009-06-30 09:47 dpkg.log.7.gz
-rw-r----- 1 root   adm       1477 2009-05-31 23:58 dpkg.log.8.gz
-rw-r----- 1 root   adm      38032 2009-04-29 11:58 dpkg.log.9.gz
-rw-r--r-- 1 root   root     32288 2010-01-14 10:35 faillog
-rw-r--r-- 1 root   root       793 2009-04-29 11:56 fontconfig.log
drwxr-xr-x 2 root   root      4096 2008-12-02 10:21 fsck
drwxr-xr-x 2 root   root      4096 2008-12-26 21:02 func
drwxr-sr-x 2 hobbit adm       4096 2010-02-28 06:40 hobbit
drwxr-xr-x 3 root   root      4096 2009-06-09 06:13 installer
-rw-r----- 1 syslog adm        350 2010-03-04 00:33 kern.log
-rw-r----- 1 syslog adm       3082 2010-02-28 06:49 kern.log.0
-rw-r----- 1 syslog adm        269 2010-02-21 06:49 kern.log.1.gz
-rw-r----- 1 syslog adm        404 2010-02-14 06:49 kern.log.2.gz
-rw-r----- 1 syslog adm      11649 2010-02-07 06:51 kern.log.3.gz
-rw-r----- 1 syslog adm     114014 2009-07-18 06:33 kern.log.4.gz
-rw-r----- 1 syslog adm      98796 2009-07-17 06:42 kern.log.5.gz
-rw-r----- 1 syslog adm        196 2009-07-12 06:48 kern.log.6.gz
-rw-rw-r-- 1 root   utmp    294628 2010-03-04 12:19 lastlog
-rw-r----- 1 syslog adm          0 2008-12-02 10:22 lpr.log
-rw-r----- 1 syslog adm          0 2008-12-14 06:48 mail.err
-rw-r----- 1 syslog adm        103 2008-12-02 15:38 mail.err.0
-rw-r----- 1 syslog adm       3790 2010-03-04 00:01 mail.info
-rw-r----- 1 syslog adm       5695 2010-02-28 00:01 mail.info.0
-rw-r----- 1 syslog adm        966 2010-02-21 00:01 mail.info.1.gz
-rw-r----- 1 syslog adm       1547 2010-02-14 00:01 mail.info.2.gz
-rw-r----- 1 syslog adm       6705 2010-02-07 05:17 mail.info.3.gz
-rw-r----- 1 syslog adm       5259 2009-08-16 04:57 mail.info.4.gz
-rw-r----- 1 syslog adm        928 2009-08-09 00:00 mail.info.5.gz
-rw-r----- 1 syslog adm       1112 2009-08-02 00:00 mail.info.6.gz
-rw-r----- 1 syslog adm       3790 2010-03-04 00:01 mail.log
-rw-r----- 1 syslog adm       5695 2010-02-28 00:01 mail.log.0
-rw-r----- 1 syslog adm        965 2010-02-21 00:01 mail.log.1.gz
-rw-r----- 1 syslog adm       1546 2010-02-14 00:01 mail.log.2.gz
-rw-r----- 1 syslog adm       6704 2010-02-07 05:17 mail.log.3.gz
-rw-r----- 1 syslog adm       5258 2009-08-16 04:57 mail.log.4.gz
-rw-r----- 1 syslog adm        927 2009-08-09 00:00 mail.log.5.gz
-rw-r----- 1 syslog adm       1111 2009-08-02 00:00 mail.log.6.gz
-rw-r----- 1 syslog adm          0 2008-12-14 06:48 mail.warn
-rw-r----- 1 syslog adm        103 2008-12-02 15:38 mail.warn.0
-rw-r----- 1 syslog adm      15808 2010-03-04 13:16 messages
-rw-r----- 1 syslog adm      28465 2010-02-28 06:49 messages.0
-rw-r----- 1 syslog adm        751 2010-02-21 06:49 messages.1.gz
-rw-r----- 1 syslog adm       1131 2010-02-14 06:49 messages.2.gz
-rw-r----- 1 syslog adm      13662 2010-02-07 06:51 messages.3.gz
-rw-r----- 1 syslog adm      16376 2009-07-26 06:48 messages.4.gz
-rw-r----- 1 syslog adm     132052 2009-07-19 06:41 messages.5.gz
-rw-r----- 1 syslog adm     131369 2009-07-18 06:33 messages.6.gz
drwxr-sr-x 2 news   news      4096 2008-12-02 10:38 news
drwxr-xr-x 2 ntp    ntp       4096 2008-08-20 13:03 ntpstats
drwxr-x--- 2 puppet puppet    4096 2010-02-28 06:40 puppet
-rw-r--r-- 1 root   root         0 2008-12-02 10:29 pycentral.log
-rw-r--r-- 1 root   root         0 2010-02-28 06:40 scrollkeeper.log
-rw-r--r-- 1 root   root         0 2010-02-21 06:37 scrollkeeper.log.1
-rw-r--r-- 1 root   root         0 2010-02-14 06:48 scrollkeeper.log.2
prw-r--r-- 1 root   root         0 2008-12-17 16:28 sshguard.fifo
-rw-r----- 1 syslog adm    3290201 2010-03-04 14:13 syslog
-rw-r----- 1 syslog adm    1000753 2010-03-04 06:51 syslog.0
-rw-r----- 1 syslog adm      68999 2010-03-03 06:32 syslog.1.gz
-rw-r----- 1 syslog adm      69120 2010-03-02 06:28 syslog.2.gz
-rw-r----- 1 syslog adm      67997 2010-03-01 06:40 syslog.3.gz
-rw-r----- 1 syslog adm      68220 2010-02-28 06:40 syslog.4.gz
-rw-r----- 1 syslog adm      70322 2010-02-27 06:28 syslog.5.gz
-rw-r----- 1 syslog adm      69170 2010-02-26 06:48 syslog.6.gz
-rw-r--r-- 1 root   root    178365 2010-02-05 09:15 udev
drwxr-xr-x 2 root   root      4096 2008-10-13 07:52 unattended-upgrades
-rw-r----- 1 syslog adm        334 2010-03-03 22:10 user.log
-rw-r----- 1 syslog adm       4950 2010-02-10 13:07 user.log.0
-rw-r----- 1 syslog adm       2945 2010-02-07 06:47 user.log.1.gz
-rw-r----- 1 syslog adm       2898 2010-01-31 06:44 user.log.2.gz
-rw-r----- 1 syslog adm       2529 2010-01-24 06:50 user.log.3.gz
-rw-rw-r-- 1 root   utmp     12288 2010-03-04 13:27 wtmp
-rw-rw-r-- 1 root   utmp     66048 2010-03-01 00:53 wtmp.1
(root)@sys-ubuntu:/var/log# ls -l /var/log/puppet
total 36
-rwxrwxrwx 1 puppet puppet 374 2010-02-28 06:40 masterhttp.log
-rw-rw---- 1 puppet puppet 170 2010-02-21 06:37 masterhttp.log.1.gz
-rw-rw---- 1 puppet puppet 167 2010-02-14 06:48 masterhttp.log.2.gz
-rw-rw---- 1 puppet puppet 185 2010-02-07 16:09 masterhttp.log.3.gz
-rw-rw---- 1 puppet puppet 170 2010-01-31 06:49 masterhttp.log.4.gz
-rw-r--r-- 1 puppet puppet   0 2010-02-28 06:40 rails.log
-rw-r--r-- 1 puppet puppet  20 2010-02-21 06:37 rails.log.1.gz
-rw-r--r-- 1 puppet puppet  20 2010-02-14 06:48 rails.log.2.gz
-rw-r--r-- 1 puppet puppet  20 2010-02-07 06:39 rails.log.3.gz
-rw-r--r-- 1 puppet puppet  20 2010-01-31 06:49 rails.log.4.gz

(root)@sys-ubuntu:/var/log# df -h /var
Filesystem            Size  Used Avail Use% Mounted on
/dev/sdb1              65G  9.1G   52G  15% /

(root)@sys-ubuntu:/var/log# ls -ld /var
drwxr-xr-x 17 root root 4096 2010-02-07 18:54 /var
(root)@sys-ubuntu:/var/log# ls -ld /var/log/
drwxr-xr-x 14 root root 4096 2010-03-04 06:51 /var/log/
(root)@sys-ubuntu:/var/log# ls -ld /var/log/puppet/
drwxr-x--- 2 puppet puppet 4096 2010-02-28 06:40 /var/log/puppet/