On 01/15/2013 08:52 AM, Peter Horvath wrote:
It might be a question which was answered earlier but i cant find a
workaround for it.
We would like to monitor files and send the content of that to a central
log server but file names are including the current date and after daily
rotation the file name obviously changes.
Does symlink works in this situation?
How can i use imfile module of rsyslog in this kind of situation.
Thank you for the answer and sorry if this is a duplicate.
Well Peter, I've never done this myself, but I've looked at the imfile
module before and pondered the same question. The solution I imagined:
you have rsyslog & imfile read in the same files each day -- files which
are symlinks that are recreated at midnight each night (or whenever your
log files change). Will probably also be necessary to HUP rsyslog after
the symlinks change.
If no one else responds correcting me, you can probably assume this will
work. Try it out and let us know!
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
