OK, guys. I appreciate feedback. For now I think I'll stick with: - linelog - logrotate (based on size / time with postrotate /usr/sbin/radmin -f /var/run/radiusd/radiusd.sock -e 'hup custom_acct_log') - postprocessing with sed (cleaning empty attributes / adding header to CSV) thanks again, Chris