A few times now I've gotten in a situation where there are just too many logs
to ship (usually because my receiver chain logstash/redis/elasticsearch have
hit an issue).
Most of my file inputs are using SavePos and ReadFromLast as True.
In these cases, I'd like to instruct nxlog to just drop the queued/historical
messages and start shipping from the "head" of the logs again.
Is there an easy way to do this? Or is it the NoCache directive that I should
use and do a stop/re-configure with NoCache/start/stop/un-configure/start?
Thanks!
Shawn
------------------------------------------------------------------------------
Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
Discover the easy way to master current and previous Microsoft technologies
and advance your career. Get an incredible 1,500+ hours of step-by-step
tutorial videos with LearnDevNow. Subscribe today and save!
http://pubads.g.doubleclick.net/gampad/clk?id=58041391&iu=/4140/ostg.clktrk
_______________________________________________
nxlog-ce-users mailing list
nxlog-ce-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
