NAME

penlogd - consolidate web server logs

SYNOPSIS

penlogd [-fd] [-j dir] [-l logfile] [-n N] [-p pidfile] [-u user] port

EXAMPLE

penlogd -l /var/log/access_log -p /var/run/penlogd.pid 10000

DESCRIPTION

Penlogd receives log entries from Pen and from each of the web servers. It consolidates the entries by replacing the source addresses in each entry with the "real" client address and writes the result to stdout or to the file given on the command line. This completely removes the need for postprocessing with mergelogs, since the logs are already merged.

Pen must be instructed to send its log to penlogd. See HOWTO and pen man page for details.

Sending penlogd a HUP signal will make it close and reopen the logfile, unless it is logging to stdout. Rotate the log like this:

mv access_log access_log.1 kill -HUP `cat <pidfile>`

where <pidfile> is the file containing pen's process id.

Sending penlogd a TERM signal will make it close the log file and exit cleanly.

OPTIONS

-d: Turn on debugging. The output goes to stderr if we are running in the foreground (see -f) and to syslog (facility user, priority debug) otherwise.
-f: Stay in foreground.
-j dir: Run in a chroot environment.
-l logfile: Write output into logfile.
-n N: Number of pen log entries to cache (default 1000).
-p pidfile: Write process id into pidfile.
-u user: Run as a different user.
port: The UDP port where penlogd receives log entries.

AUTHOR

LOCAL