Thank you for this.
There is still the slight potential of missing additions to the logfile between steps 2c and 3 - and its mainly due to how fast I can type "mv file file2" - in a panic, I probably spend more time hitting the backspace than actually typing commands correctly.
Its definitely a better catcher of entries than the solution I had in mind - so thanks very much!
