The ossec-logcollector attempts to open the log files during the lifespan of its process.
On Tuesday, August 28, 2012 10:32:44 AM UTC-7, Jyri Palis wrote: > > Juhuuuu! > > Does the ossec-logcollector proccess tire to reopen files defined in > primary configuration file or not? There is an option > "logcollector.open_attempts" which defines the number of attempts to open > files but the manual does not specify when this is done (during start or > during the lifespan of this process) > > The problem I'm trying to solve is that there is need to monitor set of > files which might not exist when ossec-logcollector stars but I'm not sure > (as the manual is not detailed enough) if the agent can reopen missing > files during normal operations or do I need to restart agent every time > defined files appears on file system? > > J. >
