On Fri, 24 Sep 1999, Russell Nelson wrote:
> Peter Samuel writes:
> > The reson I'm doing it this way is that my log files are reasonably
> > large (8Mb per day) and groking a big file every 5 minutes to extract
> > a small section is loading up the system a bit too much.
>
> That's why you use lots of little files (on average the same size as
> the time period you wish to analyze, so that you need only examine 2X
> the amount of data).
Which is fine when things are stable. However, when things go awry the
little files can get cycled too quickly.
Regards
Peter
----------
Peter Samuel [EMAIL PROTECTED]
Technical Consultant or at present:
eServ. Pty Ltd [EMAIL PROTECTED]
Phone: +61 2 9206 3410 Fax: +61 2 9281 1301
"If you kill all your unhappy customers, you'll only have happy ones left"