Ok, I installed the webalizer pkg from the cobalt site but it doesn't seem to work correctly. I can half follow the sequence of what's going on but I have a few missing pieces I hope someone can fill in. BTW, I only have on domain on the server so that should simplify things a bit.

The apache logs for the whole machine are written to /var/log/httpd.

The logrotate stuff then rotates those logs and calls split_logs which outputs the stuff into the /home/sites/home/logs/web.log file.

This is where I get lost. Some other cobalt stuff apparently takes over at this point and processes the web.log file. It seems likes it's then appended to the web.log.1 file. The web.log.1 file seems to be capped at some max size and the earlier records get chopped off. Any clues as to what does all this would be helpful.

My problem is that it seems like the webalizer.pl is being called after the web.log is copied to web.log.1 - a least I assume that's what's happening since I don't get any of the last day's stuff in the webalizer output. I made two changes that I hope will fix this. 1) added a "-p" to the webalizer call in webalizer.pl so that it will do incremental updates. 2) moved the call to webalizer.pl to right after the split_logs call in the apache logrotate file.

Not sure if this will work, but I guess I'll find out tonight. Any other suggestions are welcome.