I was wondering if rsyslog had the ability to maintain the symlink for me, i.e. create/overwrite a symlink whenever it switches to a new file?
not directly, you could possibly cobble something together, but the biggest problem is that rsyslog doesn't "switch to a new file"
rsyslog has a per-action cache of files that have been written to by that action, when you start writing to a new one, and the cache is full, rsyslog will close the least recently written to file (which can be a big problem if your cache isn't large enough and you try to write to the just-evicted file a ms later)
if you key your files on the real time of the server, and time goes backwards, you will add logs to an 'earlier' file.
you could rig something up to modify a symlink on a schedule, but it would be far more work than to just do it in cron.
David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
