In /etc/arc.conf we have:

[gridftpd]
...
logfile="/var/log/arc/gridftpd.log"
pidfile="/var/run/gridftpd.pid"
...

and our /etc/logrotate.d/nordugrid-arc-gridftpd specifies the same pid file:

/var/log/arc/gridftpd.log {
  missingok
  compress
  delaycompress
  daily
  rotate 14
  create
  postrotate
        kill -HUP `cat /var/run/gridftpd.pid`
  endscript
}

(This is just the default for the version of ARC we're using).

Regards,
Andrew.

________________________________________
From: Testbed Support for GridPP member institutes [[log in to unmask]] on behalf of Ewan MacMahon [[log in to unmask]]
Sent: Friday, December 04, 2015 3:11 PM
To: [log in to unmask]
Subject: Re: ARC gridftp logging

> -----Original Message-----
> From: Testbed Support for GridPP member institutes [mailto:TB-
> [log in to unmask]] On Behalf Of Federico Melaccio
>
> The size of our gridftpd.log files are 23 and 25 M on our ARC CEs at RALPP,
> and they are currently being written normally. The pid file exists on both
> and was created the last time we started the machines up, Nov 13th. Hope
> this helps, but now I am curious to know what you are seeing...
>
I haven't quite got it completely nailed down just yet, but essentially I'm seeing zero length logs timestamped at four in the morning. What I think is happening is that our arc.conf is placing the gridftp pidfile in /var/run/arc (which is whether Gareth seems to see Glasgow's one too) as per this bit of config in /etc/arc.conf:

[gridftpd]
user="root"
debug="3"
logfile="/var/log/arc/gridftpd.log"
pidfile="/var/run/arc/gridftpd.pid"

but then the logrotate config is looking for it in /var/run (where it doesn't exist):

# cat /etc/logrotate.d/nordugrid-arc-gridftpd
/var/log/arc/gridftpd.log {
  missingok
  compress
  delaycompress
  daily
  rotate 14
  create
  postrotate
        kill -HUP `cat /var/run/gridftpd.pid 2> /dev/null` 2> /dev/null || true
  endscript
}

Net result, every night logrotate comes along and swipes the logfile, but fails to kick the gridftp to re-open a new one, hence no logs.

What I'm curious about next is why other people aren't seeing this - I would guess that you and Andrew Lahiff have the pidfile location in your arc.confs set to point to /var/run, and that while Glasgow have got the same location as us they've presumably changed the logrotate to look in the right place for it; so - the question for you and Andrew is what do your arc.confs say, and the question for Gareth is what does his /etc/logrotate.d/nordugrid-arc-gridftpd say (or indeed has he just over-ridden the lot with a local logrotate configuration rather than letting it use the version from the nordugrid-arc-gridftpd RPM).

Ewan