[Logcheck-devel] Bug#406973: logtail misses lines in rotated file

[Marc Haber]

On Thu, Aug 09, 2007 at 06:38:50PM +0200, Christoph Berg wrote:
> Re: Nicolas Boullis 2007-01-15 <20070115110250.GA1867 at kheops.system.ecp.fr>
> > The attached patch allows to set an alternate logfile that logtail tries
> > to use as the old logfile if the inode has changed.
> > It can be used as:
> >   logtail -f /var/log/syslog -a /var/log/syslog.1
> 
> It would be nice if the "other" filename could be figured out
> automatically, for example with logrotate's "dateext" or savelog's -d
> option, the filename is not predictable. (Just scan the whole dir and
> look for the file with the right inode.)

logtail2 (which is currently in NEW for experimental) does support
dateext, and has a plug-in mechanism where new ideas to detect rotated
log files can be attached to.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 3221 2323190