Hi! Sorry for the long delay.
> Nov 11 09:29:04 oddbloke sudo: daniel : TTY=ttyp4 ; PWD=/home/daniel ; USER=root ; COMMAND=/bin/grep www.dcs.warwick.ac.uk /var/log/apache2/access.log /var/log/apache2/access.log.1 /var/log/apache2/access.log.10.gz /var/log/apache2/access.log.11.gz /var/log/apache2/access.log.12.gz /var/log/apache2/access.log.13.gz /var/log/apache2/access.log.14.gz /var/log/apache2/access.log.15.gz /var/log/apache2/access.log.16.gz /var/log/apache2/access.log.17.gz /var/log/apache2/access.log.18.gz /var/log/apache2/access.log.19.gz /var/log/apache2/access.log.20.gz /var/log/apache2/access.log.21.gz /var/log/apache2/access.log.2.gz /var/log/apache2/access.log.3.gz /var/log/apache2/access.log.4.gz /var/log/apache2/access.log.5.gz /var/log/apache2/access.log.6.gz /var/log/apache2/access.log.7.gz /var/log/apache2/access.log.8.gz /var/log/apache2/access.log.9.gz /var/log/apache2/beermap.access.log /var/log/apache2/beermap.access.log.1 /var/log/apache2/beermap.access.log.2.gz > Nov 11 09:29:04 oddbloke sudo: daniel : (command continued) > /var/log/apache2/beermap.error.log /var/log/apache2/beermap.error.log.1 > /var/log/apache2/beermap.error.log.2.gz /var/log/apache2/blog.access.log > /var/log/apache2/blog.access.log.1 /var/log/apache2/blog.access.log.10.gz > /var/log/apache2/blog.access.log.11.gz /var/log/apache2/blog.access.log.12.gz > /var/log/apache2/blog.access.log.13.gz /var/log/apache2/blog.access.log.14.gz > /var/log/apache2/blog.access.log.15.gz /var/log/apache2/blog.access.log.16.gz > /var/log/apache2/blog.access.log.2.gz /var/log/apache2/blog.access.log.3.gz > /var/log/apache2/blog.access.log.4.gz /var/log/apache2/blog.access.log.5.gz > /var/log/apache2/blog.access.log.6.gz /var/log/apache2/blog.access.log.7.gz > /var/log/apache2/blog.access.log.8.gz /var/log/apache2/blog.access.log.9.gz > /var/log/apache2/blog.error.log /var/log/apache2/blog.error.log.1 > /var/log/apache2/blog.error.log.10.gz /var/log/apache2/blog.error.log.11.gz > /var/log/apache2/blog.error .l > o > Nov 11 09:29:04 oddbloke sudo: daniel : (command continued) > /var/log/apache2/blog.error.log.13.gz /var/log/apache2/blog.error.log.14.gz > /var/log/apache2/blog.error.log.2.gz /var/log/apache2/blog.error.log.3.gz > /var/log/apache2/blog.error.log.4.gz /var/log/apache2/blog.error.log.5.gz > /var/log/apache2/blog.error.log.6.gz /var/log/apache2/blog.error.log.7.gz > /var/log/apache2/blog.error.log.8.gz /var/log/apache2/blog.error.log.9.gz > /var/log/apache2/bzr.access.log /var/log/apache2/bzr.access.log.1 > /var/log/apache2/bzr.access.log.10.gz /var/log/apache2/bzr.access.log.11.gz > /var/log/apache2/bzr.access.log.12.gz /var/log/apache2/bzr.access.log.13.gz > /var/log/apache2/bzr.access.log.14.gz /var/log/apache2/bzr.access.log.15.gz > /var/log/apache2/bzr.access.log.16.gz /var/log/apache2/bzr.access.log.17.gz > /var/log/apache2/bzr.access.log.18.gz /var/log/apache2/bzr.access.log.19.gz > /var/log/apache2/bzr.access.log.2.gz /var/log/apache2/bzr.access.log.3.gz > /var/log/apache2/bzr.access.log.4. gz > Nov 11 09:29:04 oddbloke sudo: daniel : (command continued) > /var/log/apache2/bzr.access.log.5.gz /var/log/apache2/bzr.access.log.6.gz > /var/log/apache2/bzr.access.log.7.gz /var/log/apache2/bzr.access.log.8.gz > /var/log/apache2/bzr.access.log.9.gz /var/log/apache2/bzr.error.log > /var/log/apache2/bzr.error.log.1 /var/log/apache2/bzr.error.log.10.gz > /var/log/apache2/bzr.error.log.11.gz /var/log/apache2/bzr.error.log.12.gz > /var/log/apache2/bzr.error.log.13.gz /var/log/apache2/bzr.error.log.14.gz > /var/log/apache2/bzr.error.log.15.gz /var/log/apache2/bzr.error.log.16.gz > /var/log/apache2/bzr.error.log.17.gz /var/log/apache2/bzr.error.log.18.gz > /var/log/apache2/bzr.error.log.19.gz /var/log/apache2/bzr.error.log.2.gz > /var/log/apache2/bzr.error.log.3.gz /var/log/apache2/bzr.error.log.4.gz > /var/log/apache2/bzr.error.log.5.gz /var/log/apache2/bzr.error.log.6.gz > /var/log/apache2/bzr.error.log.7.gz /var/log/apache2/bzr.error.log.8.gz > /var/log/apache2/bzr.error.log.9.gz /var/log/apache2/dj an > g > Nov 11 09:29:04 oddbloke sudo: daniel : (command continued) > /var/log/apache2/django.access.log.1 /var/log/apache2/django.access.log.2.gz > /var/log/apache2/django.error.log /var/log/apache2/error.log > /var/log/apache2/error.log.1 /var/log/apache2/error.log.10.gz > /var/log/apache2/error.log.11.gz /var/log/apache2/error.log.12.gz > /var/log/apache2/error.log.13.gz /var/log/apache2/error.log.14.gz > /var/log/apache2/error.log.15.gz /var/log/apache2/error.log.16.gz > /var/log/apache2/error.log.17.gz /var/log/apache2/error.log.18.gz > /var/log/apache2/error.log.19.gz /var/log/apache2/error.log.20.gz > /var/log/apache2/error.log.21.gz /var/log/apache2/error.log.22.gz > /var/log/apache2/error.log.23.gz /var/log/apache2/error.log.24.gz > /var/log/apache2/error.log.25.gz /var/log/apache2/error.log.26.gz > /var/log/apache2/error.log.27.gz /var/log/apache2/error.log.28.gz > /var/log/apache2/error.log.2.gz /var/log/apache2/error.log.3.gz > /var/log/apache2/error.log.4.gz /var/log/apache2/error.log.5.gz > Nov 11 09:29:04 oddbloke sudo: daniel : (command continued) > /var/log/apache2/error.log.6.gz /var/log/apache2/error.log.7.gz > /var/log/apache2/error.log.8.gz /var/log/apache2/error.log.9.gz > /var/log/apache2/joth-todo.access.log /var/log/apache2/joth-todo.access.log.1 > /var/log/apache2/joth-todo.error.log /var/log/apache2/joth-todo.error.log.1 > /var/log/apache2/lists-access.log /var/log/apache2/lists-access.log.1 > /var/log/apache2/lists-access.log.2.gz /var/log/apache2/lists-access.log.3.gz > /var/log/apache2/lists-error.log /var/log/apache2/lists-error.log.1 > /var/log/apache2/lists-error.log.2.gz /var/log/apache2/moodle.access.log > /var/log/apache2/moodle.access.log.1 /var/log/apache2/moodle.error.log > /var/log/apache2/moodle.error.log.1 /var/log/apache2/munin.access.log > /var/log/apache2/munin.access.log.1 /var/log/apache2/munin.access.log.10.gz > /var/log/apache2/munin.access.log.11.gz > /var/log/apache2/munin.access.log.12.gz > /var/log/apache2/munin.access.log.13.gz /var/log/apache2/m un > i > Nov 11 09:29:04 oddbloke sudo: daniel : (command continued) > /var/log/apache2/munin.access.log.2.gz /var/log/apache2/munin.access.log.3.gz > /var/log/apache2/munin.access.log.4.gz /var/log/apache2/munin.access.log.5.gz > /var/log/apache2/munin.access.log.6.gz /var/log/apache2/munin.access.log.7.gz > /var/log/apache2/munin.access.log.8.gz /var/log/apache2/munin.access.log.9.gz > /var/log/apache2/munin.error.log /var/log/apache2/munin.error.log.1 > /var/log/apache2/munin.error.log.10.gz /var/log/apache2/munin.error.log.11.gz > /var/log/apache2/munin.error.log.12.gz /var/log/apache2/munin.error.log.13.gz > /var/log/apache2/munin.error.log.14.gz /var/log/apache2/munin.error.log.2.gz > /var/log/apache2/munin.error.log.3.gz /var/log/apache2/munin.error.log.4.gz > /var/log/apache2/munin.error.log.5.gz /var/log/apache2/munin.error.log.6.gz > /var/log/apache2/munin.error.log.7.gz /var/log/apache2/munin.error.log.8.gz > /var/log/apache2/munin.error.log.9.gz /var/log/apache2/necromunda.access.log > Nov 11 09:29:04 oddbloke sudo: daniel : (command continued) > /var/log/apache2/necromunda.access.log.1 > /var/log/apache2/necromunda.access.log.2.gz > /var/log/apache2/necromunda.access.log.3.gz > /var/log/apache2/necromunda.error.log > /var/log/apache2/other_vhosts_access.log > /var/log/apache2/other_vhosts_access.log.1 > /var/log/apache2/other_vhosts_access.log.2.gz > /var/log/apache2/other_vhosts_access.log.3.gz > /var/log/apache2/other_vhosts_access.log.4.gz > /var/log/apache2/other_vhosts_access.log.5.gz > /var/log/apache2/other_vhosts_access.log.6.gz > /var/log/apache2/other_vhosts_access.log.7.gz > /var/log/apache2/packages.access.log /var/log/apache2/packages.access.log.1 > /var/log/apache2/packages.access.log.10.gz > /var/log/apache2/packages.access.log.11.gz > /var/log/apache2/packages.access.log.12.gz > /var/log/apache2/packages.access.log.13.gz > /var/log/apache2/packages.access.log.14.gz > /var/log/apache2/packages.access.log.15.gz > /var/log/apache2/packages.access.log.16.gz /var/log/apache2/packa ge > s > Nov 11 09:29:05 oddbloke sudo: daniel : (command continued) > /var/log/apache2/packages.access.log.3.gz > /var/log/apache2/packages.access.log.4.gz > /var/log/apache2/packages.access.log.5.gz > /var/log/apache2/packages.access.log.6.gz > /var/log/apache2/packages.access.log.7.gz > /var/log/apache2/packages.access.log.8.gz > /var/log/apache2/packages.access.log.9.gz /var/log/apache2/packages.error.log > /var/log/apache2/packages.error.log.1 > /var/log/apache2/packages.error.log.10.gz > /var/log/apache2/packages.error.log.11.gz > /var/log/apache2/packages.error.log.12.gz > /var/log/apache2/packages.error.log.13.gz > /var/log/apache2/packages.error.log.14.gz > /var/log/apache2/packages.error.log.15.gz > /var/log/apache2/packages.error.log.16.gz > /var/log/apache2/packages.error.log.2.gz > /var/log/apache2/packages.error.log.3.gz > /var/log/apache2/packages.error.log.4.gz > /var/log/apache2/packages.error.log.5.gz > /var/log/apache2/packages.error.log.6.gz > /var/log/apache2/packages.error.log.7.gz /var/log/apache2/p ac > k > Nov 11 09:29:05 oddbloke sudo: daniel : (command continued) > /var/log/apache2/packages.error.log.9.gz /var/log/apache2/texbin.access.log > /var/log/apache2/texbin.access.log.1 /var/log/apache2/texbin.access.log.2.gz > /var/log/apache2/texbin.access.log.3.gz > /var/log/apache2/texbin.access.log.4.gz > /var/log/apache2/texbin.access.log.5.gz /var/log/apache2/texbin.error.log > /var/log/apache2/todo.access.log /var/log/apache2/todo.access.log.1 > /var/log/apache2/todo.error.log /var/log/apache2/todo.error.log.1 > /var/log/apache2/under.access.log /var/log/apache2/under.access.log.1 > /var/log/apache2/under.access.log.10.gz > /var/log/apache2/under.access.log.11.gz > /var/log/apache2/under.access.log.12.gz > /var/log/apache2/under.access.log.13.gz > /var/log/apache2/under.access.log.14.gz > /var/log/apache2/under.access.log.2.gz /var/log/apache2/under.access.log.3.gz > /var/log/apache2/under.access.log.4.gz /var/log/apache2/under.access.log.5.gz > /var/log/apache2/under.access.log.6.gz /var/log/apache2/und er > . > Nov 11 09:29:05 oddbloke sudo: daniel : (command continued) > /var/log/apache2/under.access.log.8.gz /var/log/apache2/under.access.log.9.gz > /var/log/apache2/under.error.log /var/log/apache2/under.error.log.1 > /var/log/apache2/under.error.log.10.gz /var/log/apache2/under.error.log.11.gz > /var/log/apache2/under.error.log.12.gz /var/log/apache2/under.error.log.13.gz > /var/log/apache2/under.error.log.14.gz /var/log/apache2/under.error.log.2.gz > /var/log/apache2/under.error.log.3.gz /var/log/apache2/under.error.log.4.gz > /var/log/apache2/under.error.log.5.gz /var/log/apache2/under.error.log.6.gz > /var/log/apache2/under.error.log.7.gz /var/log/apache2/under.error.log.8.gz > /var/log/apache2/under.error.log.9.gz > I think it is not possible to concatenate these lines reliable. The problem is that it's sudo doing the log splitting, so the syslog daemon might receive and write out sudo log messages from other sudo sessions between the command that got split. What I could do is write out a warning message in the output that the argument list of some of the listed commands is incomplete if a "command continued" line occurs. WM -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org