On Tue, 7 Aug 2012, Jesse Hathaway wrote:
Rainer Gerhards <rgerhards <at> hq.adiscon.com> writes:
expected, create new File.
There are a number of applications that do not support changing the destination
log file while the application is running.
Why can't rsyslog notice the file size has decreased and assume the file has
been truncated?
While I think this is a nice thing to add, I'll point out that it's not
always going to work.
What if the application truncates the log file and then adds more data to
the file than was there the last time rsyslog looked at it? rsyslog will
not notice the truncation.
Any application that insists on blindly truncating the log file is making
sure that you cannot roll the log file to archive your old logs (including
the inability to easily grab the current log file when you have a problem,
because even after you rename the file, it can still be truncated by
anything that had it open before). As such, The application developer
should be told that this is a very bad way to manage log files.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
