Hi, I am going to use imfile to provide a "tail -f" log file monitoring utility. Here's my configuration:
$WorkDirectory /tmp/rsyslog/ $ModLoad imfile $InputFileName /mypath//ll.log $InputFileTag ruby $InputFileStateFile stat-file1 $InputFileSeverity error $InputFileFacility local1 $InputRunFileMonitor $InputFilePollInterval 5 #I am going to send the tail of "ll.log" to zeromq $ModLoad omzeromq.so # zeromq output $local1.* :omzeromq:bind=tcp://*:5557 $local1.* /var/log/boot.log I found that whenever a new line is added to "ll.log", imfile will outputs the whole content to output modules, such as: If the content of ll.log is: aa bb cc And ll.log is created from an empty file, and we add a new line gradually. Then the outputs of imfile (through boot.log) would be: aa aa bb aa bb cc As a result, it's not a "tail -f" utility at all. Am I missed something ? Thanks a lot~ -- Regards Yingfeng _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/
