On Fri, 2009-02-06 at 06:15 -0700, RB wrote: > > What you describe in your post > > (initial case b)) I would call a side-effect. As the file was closed due > > to size limitation, as a side-effect a new name could be generated. That > > is of interest because the name conveys the information how long it took > > to reach the file size. I think a solution to this need could be to emit > > a log message, telling which file was closed at what time (if an output > > channel reaches max size). > > I presume that one would have to create an expression-based filter to > handle this, but don't directly see how to generate (and retain) a new > filename from it.
I probably have not understood your use case. What I propose does not change the file name generation. It "just" logs a message telling you that file xxx has reached its maximum at time ttt and a new file is begun. I thought that was your point. So let me ask: why exactly would you like to have a log files like this log-2009-02-06-11-12 log-2009-02-06-17-12 I thought what you would be interested in is that the first file was created at 1112 hrs while the later was created at 1712 hrs. If I get what the point in it is, I may come up with another solution. Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
