On Thu, Jun 18, 2015 at 08:19:54PM +0200, Jonny Törnbom wrote: > > > On 18 jun 2015, at 19:26, David Lang <[email protected]> wrote: > > > >> On Thu, 18 Jun 2015, Jonny Törnbom wrote: > >> > >> Hi again, > >> > >> I'm seeing some issues with outchannel and log rotation. I've got a line > >> in my config that looks something like: > >> > >> $outchannel INFO,/info.log,9000,/rotate.sh > >> > >> where rotate.sh basically just contains: > >> > >> mv -f info.log info.log.1 > >> > >> In the config I use the outchannel like this: > >> > >> *.info;*.!warning;kern.none;authpriv.none;auth.none :omfile:$INFO > >> > >> and everything works with rotating etc _except_ that sometimes I get one > >> part of _a_ syslog message in the old file, and the rest in the new file. > >> It's only the first and sometimes the last message in a file that gets > >> partly written, the cut is not always at the same property either, it > >> varies. > >> > >> It's like rsyslog calls the log rotate script before it's done writing > >> to the log file (I put a sync call first in log rotate script to rule > >> out fs caching issues, no help.) > >> > >> I have not seen this issue with 5.8.11. We do not use any async writing > >> options or so (not that we have enabled atleast) if it's not something > >> thats on by default, but it shouldn't if I read the docs correctly? > > > > what version are you seeing this issue on. note that the current version is > > 8.10 > > > > Sorry, we're seeing the issue on 8.10.0. >
We made a quick test on 7.4.4 and cannot reproduce the issue there. We used the same RainerScript template in both cases. My colleague is trying to pinpoint in which version the issue was introduced atm. I will let you know as soon as we have something to share (unless you beat us and find it first ofc) :) Regards, Jonny _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
