which version do you use? I have recently addressed such a problem... Rainer
> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of matan monitz > Sent: Monday, November 08, 2010 2:45 PM > To: [email protected] > Subject: [rsyslog] rsyslog Text File Input Module losing seek? > > Hello all > we have a bind server writing and rotating logs on file system > (rotating > when log file reaches 10Mb). > we also have rsyslog configured with the text file input module reading > the > file and sending it over UDP to another rsyslog server. > several times during the day the rsyslog on the bind machine starts > reading > the file from the top, causing a sudden high rate of duplicate and old > events. > in an attempt to identify the problem: > 1.verified this using tcpdump to make sure the and saw the old logs > coming > down the wire to the rsyslog server > 2.made sure state files are correctly configured and are being created > when > needed > 3.made sure the rsyslog is not crashing and restarting by monitoring > the pid > googeling hasn't helped as well > > any ideas? > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
