logrotate and swatch

[Mike Burger]

On Sun, 8 Jan 2006, Michael D. Berger wrote:

> On RH E WS 4, using swatch v3.1.1, I monitor /var/log/secure.
> After the logrotate event, the monitoring stopped.
> Any suggestions?

In the logrotate event for swatch, you'll probably need to add something 
that restarts swatch.

For example, in my amavisd logrotate job (under /etc/logrotate.d), I have:

     postrotate
         /sbin/service amavisd restart 2> /dev/null 2> /dev/null || true
     endscript

This example assumes that swatch is being started via a script in 
/etc/init.d (and /etc/rc.d/rcX.d, where X is the number of your runlevel).

If you're using a call from rc.local or somesuch, you'll want to put in 
calls to whatever stops and then restarts that daemon.

--
Mike Burger
http://www.bubbanfriends.org

Visit the Dog Pound II BBS
telnet://dogpound2.citadel.org or http://dogpound2.citadel.org

To be notified of updates to the web site, visit 
http://www.bubbanfriends.org/mailman/listinfo/site-update, or send a 
message to:

site-update-request at bubbanfriends.org

with a message of:

subscribe