Consolidate web server logs
penlogd [-fd] [-j dir] [-l logfile] [-n N] [-p pidfile] [-u user] port
penlogd -l /var/log/access_log -p /var/run/penlogd.pid 10000
Penlogd receives log entries from Pen and from each of the web servers. It consolidates the entries by replacing the source addresses in each entry with the "real" client address and writes the result to stdout or to the file given on the command line. This completely removes the need for postprocessing with mergelogs, since the logs are already merged.
Pen must be instructed to send its log to penlogd. See HOWTO and pen man page for details.
Sending penlogd a HUP signal will make it close and reopen the logfile, unless it is logging to stdout. Rotate the log like this:
mv access_log access_log.1 kill -HUP `cat <pidfile>`
where <pidfile> is the file containing pen's process id.
Sending penlogd a TERM signal will make it close the log file and exit cleanly.
-d
Turn on debugging. The output goes to stderr if we are running in the foreground (see -f) and to syslog (facility user, priority debug) otherwise.
-f
Stay in foreground.
-j dir
Run in a chroot environment.
-l logfile
Write output into logfile.
-n N
Number of pen log entries to cache (default 1000).
-p pidfile
Write process id into pidfile.
-u user
Run as a different user.
port
The UDP port where penlogd receives log entries.
Copyright (C) 2002-2003 Ulric Eriksson, <[email protected]>.