<snip> > The actual questions are: > > a) is it OK that log data is visible only after the (write) delay? > b) does it sound useful to buffer based on allocation unit sizes?
a) It depends on the situation. If you're using this to conserve power or flash-disk writes, then it's going to be a pain. If you're using this to tune performance in a high log-volume environment, then this is an acceptable tradeoff. Perhaps a secondary script that would send a signal to rsyslogd and print the lines to STDOUT would be an acceptable compromise? b) It's more granular than many (most?) users will need, including myself, but I'm sure some people will find this very useful. -HKS _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog

