On Sun, 8 Jan 2006, Michael D. Berger wrote:
On RH E WS 4, using swatch v3.1.1, I monitor /var/log/secure.
After the logrotate event, the monitoring stopped.
Any suggestions?
In the logrotate event for swatch, you'll probably need to add something
that restarts swatch.
For example, in my amavisd logrotate job (under /etc/logrotate.d), I have:
postrotate
/sbin/service amavisd restart 2> /dev/null 2> /dev/null || true
endscript
This example assumes that swatch is being started via a script in
/etc/init.d (and /etc/rc.d/rcX.d, where X is the number of your runlevel).
If you're using a call from rc.local or somesuch, you'll want to put in
calls to whatever stops and then restarts that daemon.
--
Mike Burger
http://www.bubbanfriends.org
Visit the Dog Pound II BBS
telnet://dogpound2.citadel.org or http://dogpound2.citadel.org
To be notified of updates to the web site, visit
http://www.bubbanfriends.org/mailman/listinfo/site-update, or send a
message to:
site-update-request@xxxxxxxxxxxxxxxxx
with a message of:
subscribe
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
