There's a very simple explanation for this - sometimes transactions (like
a big download) take a long time to complete, and the file descriptors to
logs persist even after the midnight roll is done, so when that
transaction completes the record is logged to the old log. This is OK,
we're talking about a couple hits out of millions. Just don't rely on the
file 2001/09/24.gz only containing hits from that day, or hits from 9/24
only appearing in 2001/09/24.gz.
For a question of relevancy: there are 4200070 hits recorded in 09/24.gz.
Of those, 12307 hits are actually from the 25th. That's higher than I
thought, but tracked it down to the fact that a graceful restart (-USR1)
doesn't appear to shut down persistant connections.
Also, don't rely on the hits in the logs being in strict time order, as
logfile writing is buffered, and different buffers from different child
processes may flush at different times.
Brian
> ------ Forwarded Message
> From: "Vincent Massol" <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> Date: Sat, 29 Sep 2001 11:39:50 +0100
> To: <[EMAIL PROTECTED]>
> Subject: Apache logs problem
>
> It seems there is a problem of dates with the generated apache logs in
> /x2/logarchive/www/2001
>
> For example if you look at 2001/09/24.gz, the last entry is dated
> 25/Sep/2001:00:21:09 and the first entry of 2001/09/25.gz is dated
> 25/Sep/2001:00:00:04 !!
>
> Now, even worse, I have tried to find in 24.gz the first entry that is in
> 25.gz with no success. It is not there ! It means there is a problem of
> dates and the entries do not seem to be duplicate ... !??
>
> This is a big problem for handling logs, especially for generating
> statistics.
>
> This problem is quite new (maybe 1 month at most) and it worked fine before.
>
> Can anyone help ?
> Thanks
>
> -Vincent Massol
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
> ------ End of Forwarded Message
>
--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
CollabNet | open source | do what's right
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
