[Logcheck-devel] logtail is incomplete.

[Anthony Thyssen]

logtail is a great program but it is incomplete.
Currently it has no iead about log rolls which is normally done by renaming
files from   log  to   log.1  then log.2  etc...
logtail should on seeing a different inode, try to determine if the log was
just rolled as normal, and output the remainer of that rolled file, before
outputing the other files down the chain to the current logfile.

Of course this assumes that files are just moved, so the inodes remain the
same.   It also would not find compressed files which uses a different inode
to the original.

Basically doing this will ensure that it is not MISSING log data due to
log rolling.

I myself am trying to implement this scheme, but would like any feedback
in case someone else has already done this.

  Anthony Thyssen ( System Programmer )    <A.Thyssen at griffith.edu.au>
 -----------------------------------------------------------------------------
     "Hear me, Oh Gods!   Its a rest break not a timeout!
                  Put the fire back..."
                         --- Larry Niven and Steven Barnes, "Dream Park"
 -----------------------------------------------------------------------------
     Anthony's Home is his Castle     http://www.cit.gu.edu.au/~anthony/