Hello all we have a bind server writing and rotating logs on file system (rotating when log file reaches 10Mb). we also have rsyslog configured with the text file input module reading the file and sending it over UDP to another rsyslog server. several times during the day the rsyslog on the bind machine starts reading the file from the top, causing a sudden high rate of duplicate and old events. in an attempt to identify the problem: 1.verified this using tcpdump to make sure the and saw the old logs coming down the wire to the rsyslog server 2.made sure state files are correctly configured and are being created when needed 3.made sure the rsyslog is not crashing and restarting by monitoring the pid googeling hasn't helped as well
any ideas? _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
