Penlogd receives log entries from Pen and from each of the web servers. It
consolidates the entries by replacing the source addresses in each entry
with the "real" client address and writes the result to stdout or to
the file given on the command line.
This completely removes the need for postprocessing with mergelogs,
since the logs are already merged.
Pen must be instructed to send its log to penlogd. See HOWTO and pen man page
Sending penlogd a HUP signal will make it close and reopen the logfile, unless
it is logging to stdout. Rotate the log like this:
mv access_log access_log.1
kill -HUP cat <pidfile>
where <pidfile> is the file containing pens process id.
Sending penlogd a TERM signal will make it close the log file and exit cleanly.