Date:  Thu, 10 Apr 2008 16:41:35 +0100
From:  Michael Stauber <bq (at mark) solarspeed.net>
Subject:  [coba-e:12535] Re: logrotate
To:  coba-e (at mark) bluequartz.org
Message-Id:  <200804101741.36095.bq (at mark) solarspeed.net>
In-Reply-To:  <637022.25041.qm (at mark) web65614.mail.ac4.yahoo.com>
References:  <637022.25041.qm (at mark) web65614.mail.ac4.yahoo.com>
X-Mail-Count: 12535

Hi Dan,

> Warning: Truncating oversized request field
> Warning: Truncating oversized date field
> Skipping bad record (9113)
> Warning: Truncating oversized referrer field
> Warning: Truncating oversized referrer field
> Warning: Truncating oversized referrer field

Edit /etc/cron.daily/00webalizer and change this part of it ...

if [ -s /var/log/httpd/access_log ] ; then
    /usr/bin/webalizer
fi

... to this:

if [ -s /var/log/httpd/access_log ] ; then
    /usr/bin/webalizer -Q
fi

That will fix the issue. The messages appear when Webalizer is parsing a  line 
in the Apache logfile with a long referrer field. In that case it simply 
truncates the information in the referer field and moves on.

The "-Q" switch to Webalizer suppresses ALL messages and makes it totally 
quiet. If you want to suppress just info messages, but not warnings, then 
use "-q" instead.

-- 
With best regards,

Michael Stauber