I know this is the rsyslog list but I use Apache NiFi for this type of use case.
Ryan On Tue, May 24, 2016 at 11:40 AM, Rainer Gerhards <[email protected]> wrote: > 2016-05-24 17:10 GMT+02:00 Thomas Güttler <[email protected]>: > > Hi, > > > > I have some remote hosts which can't connect to our central host. > > > > Up to now we do dirty file based fetching of log files. > > > > This has a major draw back: > > > > - If logrotate runs, then some lines could get lost. > > If you first move the file and only after that HUP rsyslogd, no lines > will get lost. The other way around can loose messages. Rsyslog keeps > the fd open (fd != file name) until HUP, so will write to the moved > files until HUP. > > HTH > Rainer > > > > Is there a way to handle logs with rsyslogd which > > don't loose a single line, and which allow **fetching** > > the logs (not pushing/streaming) them? > > > > Regards, > > Thomas Güttler > > > > -- > > Thomas Guettler http://www.thomas-guettler.de/ > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of > > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > > LIKE THAT. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
