[cobalt-users] Log file rotation..

["David Conorozzo" <davidc@xxxxxxxxxxxxxxxxx>]

Currently, I believe, log rotation goes as follows (on my RaQ):
1. access file is split into appropriate directories
2. If access file is bigger than max log size, it is compressed and the original is truncated.
3. On each virtual site, the size of the new log file is checked and if any of them are bigger than the max sizes, they are compressed and then the original is truncated.

The problem is this, when the log is compressed and the original is truncated, my log analysis tool (WebTrends) will not be able to get yesterday's data (because the file is empty).  Does anyone have a suggestion?  How could I get logrotate to wait 1 day before clearing that file?  Is there any way to have it check the log files of each site first and compress them if necessary, then split the access log???


David Conorozzo
PC Assistance, Inc.