cronolog是一个比较不错的开源日志精细分割工具，这里简单介绍一下。更多详情请参考官方帮助文档。
以cronolog-1.6.2为例
一.下载：
wget http://cronolog.org/download/cronolog-1.6.2.tar.gz
root@localhost:~#wget http://cronolog.org/download/cronolog-1.6.2.tar.gz
--2014-10-13 11:44:08--
Resolving cronolog.org... 85.119.82.138, 80.77.248.26
Connecting to cronolog.org|85.119.82.138|:80... failed: Connection refused.
Connecting to cronolog.org|80.77.248.26|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 133591 (130K) [application/x-gzip]
Saving to: “cronolog-1.6.2.tar.gz”
100%[======================================>] 133,591
2014-10-13 11:44:10 (116 KB/s) - “cronolog-1.6.2.tar.gz” saved [133591/133591]
二.安装
yum -y install gcc gcc-c++
[root@localhost ~]# tar -zxvf cronolog-1.6.2.tar.gz -C /usr/local/src/
[root@localhost ~]# cd /usr/local/src/cronolog-1.6.2/
[root@localhost cronolog-1.6.2]# ./configure && make && make install
[root@localhost ~]# crono
cronolog
安装完成后会生成两个命令cronolog cronosplit
三.使用
以centos6.5 x64下的apache为例：/etc/httpd/conf/httpd.conf
示例：把错误日志格式及存放位置通过cronolog加以自定义，centos6标准的apache配置大约在484行
ErrorLog "|/usr/local/sbin/cronolog /var/log/httpd/%Y/%m/%d/error_log-%X.log" combined
以下是截取的官方说明：
Installation
Cronolog uses GNU autoconf, so it is configured and built with the standard sequence:
./configure
make
To install type "make install" or simply copy the executable "src/cronolog" to a suitable directory.
Cronolog has a number of options that can be set either by including in CFLAGS when configuring, or by editing the file "src/config.h":
|
-DFILE_MODE=octal-number |
mode used for creating files (default is 0664) |
| -DDIR_MODE=octal-number | mode used for creating directories (default is 0775) |
| -DDONT_CREATE_SUBDIRS | don't include code to create missing directories |
| -DNEED_GETOPT_DEFS | if your platform doesn't declare getopt() |
CFLAGS="-O2 -DFILE_MODE=0600" ./configure
cronolog features
cronolog is a simple filter program that reads log file entries from standard input and writes each entry to the output file specified by a filename template and the current date and time. When the expanded filename changes, the current file is closed and a new one opened. cronolog is intended to be used in conjunction with a Web server, such as Apache, to split the access log into daily or monthly logs. For example the Apache configuration directives:would instruct Apache to pipe its access and error log messages into separate copies of cronolog, which would create new log files each day in a directory hierarchy structured by date, i.e. on 31 December 2002 messages would be written toTransferLog "|/usr/sbin/cronolog /web/logs/%Y/%m/%d/access.log"
ErrorLog "|/usr/sbin/cronolog /web/logs/%Y/%m/%d/errors.log"
after midnight the files/web/logs/2002/12/31/access.log /web/logs/2002/12/31/errors.log
would be used, with the directories 2003, 2003/01 and 2003/01/01 being created if they did not already exist. More detail to come... Andrew Ford/web/logs/2003/01/01/access.log /web/logs/2003/01/01/errors.log
2002-01-20
Cronolog usage
The cronolog package consists of two programs: cronolog and cronosplit. There is a manual page for each in PDF format (cronolog and cronosplit)The cronolog program
The cronolog program is normally invoked as a piped log filter program from Apache as specified in the configuration file. The direct program usage is:/path/to/cronolog [OPTIONS] logfile-specThe logfile-spec is a template that describes the names of the log files that should be written. Each character in the template represents a character in the expanded filename, except for date and time format specifiers, which are replaced by their expansion. Format specifiers consist of a "%" followed by a character as described in the table below. However it would normally be used in an Apache CustomLog directive as so:
CustomLog "|/path/to/cronolog [OPTIONS] logfile-spec" [format]Note that the entire cronolog command line is enclosed within quotes and preceded by a vertical bar ("|"). The quotes cause Apache to regard the command line as a single argument and the presence of the vertical bar tells Apache that this is a piped log and that the command line is passed to the shell.
cronolog options
| Long form | Short form | Meaning |
|---|---|---|
| --hardlink=NAME | -H |
maintain a hard link from NAME to the current log file |
| --symlink=NAME | -S |
maintain a symbolic link from NAME to the current log file |
| --prev-symlink=NAME |
-P |
maintain a symbolic link from NAME to previous log |
| --link=NAME | -l |
same as -S/--symlink |
| --help | -h | print a help message then exit |
| --period=PERIOD |
-p |
set the rotation period explicitly (new in 1.6.2) |
| --delay=DELAY | |
set the rotation period delay (new in 1.6.2 -- this will be renamed --rotation-offset with a short form of -o in 1.6.3) |
| --once-only | |
create single output log from template (not rotated) |
| --debug=FILE | -x |
write debug messages to FILE ( or to standard error if FILE is "-") |
| --american | -a | Interprete ambiguous start dates in American date formats (mm/dd/yy[yy]) |
| --european | -e | Interprete ambiguous start dates in European date formats (dd/mm/yy[yy] - default) |
| --start-time=DT | -s DT | starting date and time (in ambiguous cases interpreted according to --american or --european specification) |
| --time-zone=TZ | -z |
use TZ for timezone |
| --version | -V | print version number, then exit |
Template specifiers
| Specifier | Description |
|---|---|
| %% | a literal % character |
| %n | a new-line character |
| %t | a horizontal tab character |
| Time fields | |
| %H | hour (00..23) |
| %I | hour (01..12) |
| %p | the locale's AM or PM indicator |
| %M | minute (00..59) |
| %S | second (00..61, which allows for leap seconds) |
| %X | the locale's time representation (e.g.: "15:12:47") |
| %Z | time zone (e.g. GMT), or nothing if the time zone cannot be determined |
| Date fields | |
| %a | the locale's abbreviated weekday name (e.g.: Sun..Sat) |
| %A | the locale's full weekday name (e.g.: Sunday .. Saturday) |
| %b | the locale's abbreviated month name (e.g.: Jan .. Dec) |
| %B | the locale's full month name, (e.g.: January .. December) |
| %c | the locale's date and time (e.g.: "Sun Dec 15 14:12:47 GMT 1996") |
| %d | day of month (01 .. 31) |
| %j | day of year (001 .. 366) |
| %m | month (01 .. 12) |
| %U | week of the year with Sunday as first day of week (00..53, where week 1 is the week containing the first Sunday of the year) |
| %W | week of the year with Monday as first day of week (00..53, where week 1 is the week containing the first Monday of the year) |
| %w | day of week (0 .. 6, where 0 corresponds to Sunday) |
| %x | locale's date representation (e.g. today in Britain: "15/12/96") |
| %y | year without the century (00 .. 99) |
| %Y | year with the century (1970 .. 2038) |