From owner-freebsd-questions@FreeBSD.ORG Wed Oct 3 15:48:28 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 46D7116A420 for ; Wed, 3 Oct 2007 15:48:28 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from pi.codefab.com (pi.codefab.com [199.103.21.227]) by mx1.freebsd.org (Postfix) with ESMTP id 0590813C459 for ; Wed, 3 Oct 2007 15:48:27 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from localhost (localhost [127.0.0.1]) by pi.codefab.com (Postfix) with ESMTP id E4B9C5DAC; Wed, 3 Oct 2007 11:48:26 -0400 (EDT) X-Virus-Scanned: amavisd-new at codefab.com Received: from pi.codefab.com ([127.0.0.1]) by localhost (pi.codefab.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id apDJyaxiHEnR; Wed, 3 Oct 2007 11:48:23 -0400 (EDT) Received: from [192.168.1.3] (pool-71-190-65-187.nycmny.east.verizon.net [71.190.65.187]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by pi.codefab.com (Postfix) with ESMTP id DE2195C3E; Wed, 3 Oct 2007 11:48:21 -0400 (EDT) Message-ID: <4703B9B4.2020709@mac.com> Date: Wed, 03 Oct 2007 11:48:04 -0400 From: Chuck Swiger User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Olivier Nicole References: <20071001231334.71ddc9ac@attila> <374E75AA-8954-4186-BBCA-F775730B1192@gmail.com> <200710020324.l923Ohvf075150@banyan.cs.ait.ac.th> In-Reply-To: <200710020324.l923Ohvf075150@banyan.cs.ait.ac.th> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: mnslinky@gmail.com, freebsd-questions@freebsd.org Subject: Re: Is Apache rotatelogs efficienct for real world use? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Oct 2007 15:48:28 -0000 Olivier Nicole wrote: >> Is Apache rotatelogs suitable for handling large volumes of >> access logs, i.e. around 50K requests per hour at _peak_ time which is >> 1.2M requests per day. According to Apache website >> (http://httpd.apache.org/docs/1.3/logs.html#rotation) this becomes >> about 120MB in size per day. > > In another setting (few hits, buts hundreds of sites, rotatelogs means > one process per site, while newsyslog is only one process when it is > needed. The last log to rotate sending the appropriate signale to > Apache. That's a fine point to mention. However, if you're running a bunch of domains using virtual hosts on one Apache instance, then you can just combine them into a single output logfile, have just one rotatelogs instance, feed that through rDNS lookups, and then feed them into a splitter per site or just use a webanalyser which is vhosts-aware and generates separate reports for each vhost.... -- -Chuck