Sane Roaming Agent logging defaults
launched
Scott Thomson
Versions up to 1.9.4 do not do any log management whatsoever, and will fill-disk if not managed by something else like RMM.
Proposed fix in RC/upcoming releases is to switch from time-based rollover (which is apparently bugged) to size based rollover.
In the version I was provided (1.10.2), the logging defaults are as follows:
LogLevel: DEBUG
Log size: 100MB
Logs retained 10
This means that the agent is both overlogging (DEBUG is not a sane default log level folks!) and being allowed to retain 1000MB of logs.
Please configure
SANE
default logging options. My suggestion would be:- Implement a log library like NLOG if your 2018 version of LOG4NET can't do basic log rotation. In the interim,
- Set default log level to INFO. DEBUG should only be enabled in the context of troubleshooting an active case.
- Set log rotation/retention to something reasonable; I would suggest that something like DNSFilter should not be retaining more that 50MB of log data.
Gregory Brown
Steve, I applaud your thoughtful response to customer suggestions that resulted in actual updates to the DNSFilter Windows Client.
Steve Staden
launched
Voters, as of v1.10.2 we have changed the logging behavior based on your feedback - https://dnsfilter.canny.io/changelog/april-12-2023-windows-rc-v1102-new-installs. The client will now store a maximum of 10 files, each with a size limit of 20MB. Bringing the total to 200MB from 1000MB. We're definitely trying to find the right balance with logging.
We're continuing to look at some of these other ideas that were shared.
Darrin Piotrowski
In DattoRMM we added to the Disk Cleanup script to purge DNSF log files over 7 days old. This occurs when a drive is 90% full. This was after we started receiving 100s of disk full messages and the cause was DNSF log files.
Gregory Brown
I like the idea of being able to change the log level to whatever is needed. Perhaps the default should be INFO, and DNSFilter technical support could be the ones who would make the change to DEBUG for a client if requested.
Steve Staden
under review ( scoping )
Steve Staden
Scott Thomson: Appreciate you pointing this out. Let me raise this to the team.