Hi Lando(?), Buffering doesn't make much sense when UDP output cannot really block, though this is probably not related. Please file a bug report in trac and include the exact simplified steps to reproduce the issue together with the nxlog.log.
Regards, Botond On Tue, 31 Dec 2013 07:52:39 -0800 Lando <lando...@gmail.com> wrote: > I'm using nxlog to watch two vCenter log files on a Windows Server 2008 > system and I have a very simple config. Nxlog began failing yesterday > after a file was rotated. Here's my config: > > <Extension syslog> > Module xm_syslog > </Extension> > > <Input in1> > Module im_file > File "C:\ProgramData\VMware\VMware > VirtualCenter\Logs\vpxd-[0-5][0-9].log" > SavePos TRUE > </Input> > > <Input in2> > Module im_file > File "C:\ProgramData\VMware\VMware > VirtualCenter\Logs\vpxd-alert-[0-5][0-9].log" > SavePos TRUE > </Input> > > <Processor buffer1> > Module pm_buffer > MaxSize 1024 > Type Mem > WarnLimit 512 > </Processor> > > <Processor buffer2> > Module pm_buffer > MaxSize 1024 > Type Mem > WarnLimit 512 > </Processor> > > <Output out1> > Module om_udp > Host <ip> > Port 514 > </Output> > > <Output out2> > Module om_udp > Host <ip> > Port 514 > </Output> > > <Route 1> > Path in1 => buffer1 => out1 > </Route> > > <Route 2> > Path in2 => buffer2 => out2 > </Route> > > > vCenter log rotation is a bit odd so I'm thinking that it's at least > partially causing this problem. You can see from above the filename I'm > watching. This file is created as vpxd-01.log and increments *up* from > there. The files are rotated when they hit 50MB and old logs get > compressed after two new files are created, e.g. vpxd-03 is created and > vpxd-01 gets compressed. > > But yesterday the first file that nxlog had started watching (since being > installed last week) was rotated, causing this error: > > 2013-12-28 19:41:08 WARNING input file does not exist: > C:\ProgramData\VMware\VMware VirtualCenter\Logs\vpxd-47.log > > > It repeats 12 times across the next 24 hours and then nxlog failed entirely > until I restarted the service yesterday morning. > > Hopefully my explanation makes sense. I ended up losing about six hours of > logs so I want to make sure this doesn't happen again. Does anybody have > any solution or suggestions? ------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk _______________________________________________ nxlog-ce-users mailing list nxlog-ce-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
