Configure Logrotate To Rotate And Flush MySQL Logs Without A Password
If you have the resources (CPU + RAM) available on your server then its can be a great troubleshooting tool if you enable MySQL logging which includes server messages, SQL query logs, and slow query logs. If you do not have the resources I would suggest only enable minimal logging such as only server messages and the slow query log since enabling all queries to be written to a file can become expensive rather quickly. Below I discuss enabling three different types of MySQL logging, adding a MySQL configuration file to logrotate, and configuring root to run mysqladmin commands without having to type the password out each time.
First we are going to enable the various types of MySQL logging. I would keep an eye on the query log just in case it becomes to resource intensive. Below I will display the configuration command to enable each type of logging including creating the file and directory that MySQL will log to.
Modify The my.cnf MySQL Config File:First lets add the statements to the MySQL configuration file which by default is typically /etc/my.cnf. There will probably be a minimal set of configuration items in this file if you have never modified it. Add the below lines which include comments above each one to explain what will be logged.Configure my.cnf To Log Queries, Errors, Slow Queries:
Create MySQL Log Directory: I like to try and split services up in the log directory so I can keep track of things easier so in this case we are going to do the same. In the command list below we will be creating a directory, creating blank files, and then making sure everything has the right permissions and is owned by the proper user which should be the “mysql”.Create MySQL Log Directory & Log Files:
Restart MySQL & Verify Logging:Now lets restart MySQL and verify the logging is operational. You can restart MySQL by issuing the below command.Restart MySQL:
Configure Root User MySQL Access:Now in preparation for the logrotate mysql configuration file you want to add a file to the root users home directory so that user can flush the log files without having to use a username and password every single time. If you attempt to flush the MySQL logs before you add the below configuration file you will receive an error similar to the below.Error When Running mysqladmin flush-logs Without A Password:
Add Logrotate MySQL Configuration File: Now add the below configuration contents to a new file named “mysql” in the “/etc/logrotate.d/” directory.The mysql Logrotate Configuration File Contents:
# Will log MySQL Errors Including Startup Errors log-error=/var/log/mysql/mysqld.log # Will log MySQL queries, This log will grow quickly general_log = 1 general_log_file=/var/log/mysql/mysql.log
# Will log MySQL queries that take a long time (in this case over 1 second as specified below) slow_query_log = 1 slow_query_log_file = /var/log/mysql/mysql-slow.log long_query_time = 1
The above configuration lines should go under the main section of MySQL which should be “[mysqld]” at the beginning of the file. The next section doesn’t start until “[mysqld_safe]” so as you can see there are typically two sections and they are divided by these headings.
[root@dev ~]# mkdir /var/log/mysql [root@dev ~]# touch /var/log/mysql/mysql.log [root@dev ~]# touch /var/log/mysql/mysqld.log [root@dev ~]# touch /var/log/mysql/mysql-slow.log [root@dev ~]# chown -R mysql.mysql /var/log/mysql [root@dev ~]# chmod -R 664 /var/log/mysql/
So notice that all of the new files will be owned the mysql user in the mysql group and they will allow reading from all users and writing from the mysql user and members of the mysql group.
[root@dev ~]# /etc/init.d/mysqld restart Stopping MySQL: [ OK ] Starting MySQL: [ OK ] [root@dev ~]#
If MySQL fails to restart and this is a live server quickly make a backup of my.cnf, remove the changes,and start MySQL so your downtime is minimal. If you follow the directions above you should be fine but I wanted to mention just in case there were any issues with the restart. Now visit some web pages on your site to generate some of the MySQL queries to the database and then view the log files to verify logging is functional. You can view the log files in real time by using the tail command as displayed below.
View New MySQL Log Files In Real Time With Tail:
[root@dev mysql]# tail -f mysql.log FROM wp_posts WHERE MONTH(post_date) = '12' AND YEAR(post_date) = '2009' AND post_type = 'post' AND post_status = 'publish' AND post_date < '2009-12-20 12:52:13'
[root@dev ~]# /usr/bin/mysqladmin flush-logs /usr/bin/mysqladmin: connect to server at 'localhost' failed error: 'Access denied for user 'root'@'localhost' (using password: NO)'
Use your favorite editor such as vi as the root user to create a file by the name of .my.cnf in /root/. Add the contents below to this file but of make sure to modify the username and password in the example below to include a MySQL username and password that has access to run “mysqladmin flush-logs”.
[mysqladmin] user = root password = changeme
Make sure that you set the proper permissions for the above file once you have created it so that no other users on the server can read the file contents and find out what the MySQL root password is. To set the proper permissions use the below command.
Set Permissions On /root/.my.cnf:
[root@dev ~]# chmod 600 /root/.my.cnf
Now you can run the “mysqladmin flush-logs” command as the root user without having to enter a username or password and without receiving an error.
/var/log/mysql/*.log { create 644 mysql mysql notifempty daily rotate 5 missingok nocompress sharedscripts postrotate # run if mysqld is running if test -n "`ps acx|grep mysqld`"; then /usr/bin/mysqladmin flush-logs fi endscript }
The basis of the file is that it will rotate any files in the MySQL directory that end with “.log”. Once the files are rotated the new files will be generated by the mysql user with permissions of 644. The files will not be rotated by Logrotate unless they have contents. The files will be rotated daily and five copies will be retained. Logrotate is not going to panic if there is a file missing and when all is said and done the root user will run “mysqladmin flush-logs” to flush out the log files so logs will continue to write to the proper files.
