RE: [cobalt-users] Logs Methodology

["Holstein, Regis" <regis.holstein@xxxxxxxxxx>]

Hi,

I want to provide statistics to my customers using my own statistics
program.   On my previous system, the logs for all the vhosts were located
in the same folder, to it was quite easy to do a fetch.

On the RAQ, things are more complex.  The logs are stored under each vhost,
instead of being stored in a central location.  However, I have noticed (and
I sent a msg to that regard this monring on this list) that the Cobalt seems
to maintain a combined log file of all the vhost activities.  During the log
rotate, it seems to split this combined log into vhost-specific log files
and place them in the vhost /log folder.

First question: I believe most statistics program can handle log files that
contained combined vhost entries. They simply filter the vhost name
information contained in this combined log.  Do you think this would be a
viable solution? Any drawback?

Second question: The following entry in /etc/logrotate.d/apache seem to
handle this split log process.

/var/log/httpd/access {
 prerotate
  /usr/local/sbin/split_logs web < /var/log/httpd/access
 endscript
    missingok
    postrotate
 /bin/kill -USR1 `cat /var/run/httpd.pid`
    endscript
    daily
}

If I don't want logs to be split anymore, can I simply remove

 prerotate
  /usr/local/sbin/split_logs web < /var/log/httpd/access
 endscript

I see to impact in doing this, which are fine for me because I don't rely on
the RAQ stats utility to provide stats to my client :
1/ the RAQ statistics will not be generated
2/ the site administrators will not be able to download the log files from
their /log folder

Do you seen any other potential issue? The RAQ is new to me, so I don't want
to introduce a ripple effect by removing those two lines! :)

Thanks a lot,

Regis Holstein
TDS Communications