Vivek J. Patankar wrote: > > I hope you realise that if set to daily, logrotate happens at 4:02AM. > That means yesterday's log actually contains 4 hours of 'today' and is > missing 4 hours from yesterday. > If you run automated report generation from the logs, eg. SARG, the > report will be incomplete unless the utility that generates reports is > aware of log rotation and takes it into consideration. > This can be changed - either change the entry in /etc/crontab, or remove logrotate from /etc/cron.daily and put an entry in /etc/cron.d to run it at 12:01 or something like that. Mikkel -- Do not meddle in the affairs of dragons, for thou art crunchy and taste good with Ketchup!
Attachment:
signature.asc
Description: OpenPGP digital signature
