Extending /etc/pve/.clusterlog

[holr]

Hello,
I am trying to create an audit trail spanning a couple of months of user logins into proxmox. I believe /etc/pve/.clusterlog is the best source of information, but by default it only stores the last 50 entries. Is there any way, short of running a cron job to archive every so often, to extend the number of entries or archive the file sensibly?

Thank you!

 

[Chris]

Without putting to much tougth into it you might run `tail -f /etc/pve/.clusterlog >> path_to_your_output_file`... But there might be better ways

 

[fabian]

each node keeps a much bigger archive of tasks that have run on it, see "pvenode task list" and the "GET /api2/json/nodes/{node}/tasks" API endpoint (and its children).

 

[Belokan]

Without putting to much tougth into it you might run `tail -f /etc/pve/.clusterlog >> path_to_your_output_file`... But there might be better ways

One "better way" is to use -F instead of -f in the case in order to make it "rotation-proof"