comment on

Following the move, whatever service is writing to the file will need to be restarted as well, for example:

system("/etc/init.d/syslog restart") == 0 or ...
[download]

I've seen situations where the application would continue writing to the old file until the service was restarted. Odd but true, and it might explain some of what you're seeing.

If you can, check /etc/logrotate.conf or any of the files in /etc/logrotate.d, and you'll probably see where certain services are being restarted following the rotation.

If things get any worse, I'll have to ask you to stop helping me.

In reply to Re: Simple Log Rotate Problem by shockme
in thread Simple Log Rotate Problem by monger

Are you posting in the right place? Check out Where do I post X? to know for sure.
Posts may use any of the Perl Monks Approved HTML tags. Currently these include the following:
<code> <a> <b> <big> <blockquote> <br /> <dd> <dl> <dt> <em> <font> <h1> <h2> <h3> <h4> <h5> <h6> <hr /> <i> <li> <nbsp> <ol> <p> <small> <strike> <strong> <sub> <sup> <table> <td> <th> <tr> <tt> <u> <ul>
Snippets of code should be wrapped in <code> tags not <pre> tags. In fact, <pre> tags should generally be avoided. If they must be used, extreme care should be taken to ensure that their contents do not have long lines (<70 chars), in order to prevent horizontal scrolling (and possible janitor intervention).
Want more info? How to link or How to display code and escape characters are good places to start.


Your skill will accomplish what the force of many cannot
	PerlMonks