Am 24.05.2016 um 17:40 schrieb Rainer Gerhards:
2016-05-24 17:10 GMT+02:00 Thomas Güttler <[email protected]>:
Hi,
I have some remote hosts which can't connect to our central host.
Up to now we do dirty file based fetching of log files.
This has a major draw back:
- If logrotate runs, then some lines could get lost.
If you first move the file and only after that HUP rsyslogd, no lines
will get lost. The other way around can loose messages. Rsyslog keeps
the fd open (fd != file name) until HUP, so will write to the moved
files until HUP.
Yes, I am sure, that rsyslog won't loose a single line if you rotate like
you describe it.
But since the logs get fetched, not pushed, I can't synchronise the
fetch and rotate process. ... ok, it could be synchronised, but
this makes things complicated.
I think the file based fetching (via rsync) don't really work.
On the other hand I would like to avoid to add a new system like
apache nifi ....
Please tell me, if you see a simple solution.
Thank you,
Thomas Güttler
--
Thomas Guettler http://www.thomas-guettler.de/
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
