swift-drive-audit does not handle kern.log rotation

[Jola Mirecka]

Need to add support for kern.log rotation for swift-drive-audit. There may occur a large miss of information from the time frame specified if kern.log has 'just' rotated. So far all the time stamps matching the time frame, but rotated into kern.log.1 have been ignored.

Also swift-drive-audit seems to be very slow on the large systems, the reason behind it is that the reading of kern.log is done from the beginning to the end, while the significant information is at the end of the file. The idea is to implement feature allowing swift-drive-audit to read from the back of the file, which will also accommodate log roll-over issue.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/16427

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/16427
Committed: http://github.com/openstack/swift/commit/902b66d3ae326b73e71bdaecd7297981a90a11c4
Submitter: Jenkins
Branch: master

commit 902b66d3ae326b73e71bdaecd7297981a90a11c4
Author: jola-mirecka <email address hidden>
Date: Mon Nov 19 13:02:34 2012 +0000

    Change in swift-drive-audit handling log rotation.

    Change supports kern.log rotation in order to avoid loss
    of significant information.

    There is a year change functionality added as kern.log
    does not keep record of year.

    There is also backwards function added which allows
    reading logs from the back to the front, speeding up the
    execution along with the unit test for it

    Fixes Bug 1080682

    Change-Id: I93436c405aff5625396514000cab774b66022dd0