Linux – How to get logwatch to process alternate apache logs

apache-2.2centoslinuxlogwatch

CentOS 5 | Apache 2.2.3 | LogWatch 7.3

Hello All,

I have Apache running on a CentOS box and am hosting multiple VirtualHosts. Each of these virtual hosts has a separate access log. For example:

/var/log/httpd/example.foo.com-access_log
/var/log/httpd/downloads.foo.com-access_log

The main site is writing logs to /var/log/httpd/access_log.

LogWatch appears to only be checking the main log files. How can I tell it to include the other files too?

I thought there might be a pointer somewhere in /usr/share/logwatch/scripts/services/http but I didn't see it there.

Any thoughts?

-M

Best Answer

The log files you have provided should be picked up without you making any changes because of the default config

LogFile = httpd/*access_log
LogFile = apache/*access.log.1
LogFile = apache/*access.log
LogFile = apache2/*access.log.1
LogFile = apache2/*access.log
LogFile = apache-ssl/*access.log.1
LogFile = apache-ssl/*access.log

But is you want to be more specific you can create a config file in /etc/logwatch/conf such as /etc/logwatch/conf/logfiles/http.conf with

Logfile = /var/log/httpd/downloads.foo.com-access_log
...
...

Related Solutions

Linux Bash – How to Sort du -h Output by Size

As of GNU coreutils 7.5 released in August 2009, sort allows a -h parameter, which allows numeric suffixes of the kind produced by du -h:

du -hs * | sort -h

If you are using a sort that does not support -h, you can install GNU Coreutils. E.g. on an older Mac OS X:

brew install coreutils
du -hs * | gsort -h

From sort manual:

-h, --human-numeric-sort compare human readable numbers (e.g., 2K 1G)

Centos – Compress logs rotated with cronolog

Logrotate really is the tool for this job but if you can't use it then you could use find and the -ctime patameter

find /var/logs/httpd/my.example.host.com/ -ctime +0 -not -name '*.gz' -exec gzip {} \;

should do what you want as it finds files that were changed >24hours ago that arean't already compressed and compresses them.

To ensure the file you are working on isn't still open you could do something like

#!/bin/bash
for file in $(find /var/logs/httpd/my.example.host.com/ -ctime +0 -not -name '*.gz')
do
    lsof | grep $file
    if [$? -eq 1 ]
    then
        gzip $file
    fi
done

Best Answer

Related Solutions

Linux Bash – How to Sort du -h Output by Size

Centos – Compress logs rotated with cronolog

Related Topic