I'm trying to setup a secondary log rotation mechanism on on of my production systems.

Right now, the system is setup to rotate logs on a weekly basis.

In addition to the weekly log rotation, I also need to take hourly snapshots (i.e. just the deltas between snapshots).

As part of this process, I can not delete the original file since that is being handled by the weekly log rotation and archival process.

These files get pretty big, so IO and CPU are both concerns.

Any suggestions?