On Thu, Jan 8, 2015 at 9:28 AM, Anh-Hoang LE <[email protected]> wrote:
> Hi, > > I'd like to know if there is a way to get the moment of the end of a imfile > treatment? > that's a very good question, thanks for asking. The problem I see is that there is no definite point where rsyslog ends it's processing -- except, of course, when the file is being deleted. The problem is that rsyslog does not know the producer, and so it does not know if that producer will write the next chunk just nanoseconds after rsyslog got the current one. So in essence, rsyslog is facing exactly the same problem you do. If anybody has an idea of how to handle that, let me know. One solution would be a kind of timeout, so that if the file is not being written to for a certain amount of time, it is considered inactive. That could run on the janitor interval. But again, this can cause problems with low-value log files... Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

