hello rainer we are using 3.22.1-3 from rpm on rhel 5 On Mon, Nov 8, 2010 at 3:46 PM, Rainer Gerhards <[email protected]>wrote:
> which version do you use? I have recently addressed such a problem... > > Rainer > > > -----Original Message----- > > From: [email protected] [mailto:rsyslog- > > [email protected]] On Behalf Of matan monitz > > Sent: Monday, November 08, 2010 2:45 PM > > To: [email protected] > > Subject: [rsyslog] rsyslog Text File Input Module losing seek? > > > > Hello all > > we have a bind server writing and rotating logs on file system > > (rotating > > when log file reaches 10Mb). > > we also have rsyslog configured with the text file input module reading > > the > > file and sending it over UDP to another rsyslog server. > > several times during the day the rsyslog on the bind machine starts > > reading > > the file from the top, causing a sudden high rate of duplicate and old > > events. > > in an attempt to identify the problem: > > 1.verified this using tcpdump to make sure the and saw the old logs > > coming > > down the wire to the rsyslog server > > 2.made sure state files are correctly configured and are being created > > when > > needed > > 3.made sure the rsyslog is not crashing and restarting by monitoring > > the pid > > googeling hasn't helped as well > > > > any ideas? > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
