On Mon, 19 Sep 2016, Alec Swan wrote:
I am using rsyslog to read log files and send logs to Elasticsearch. I am looking for ideas on how to delete log files after their content is successfully sent to Elasticsearch.
rsyslog doesn't have any options to remove a file when it's done processing it (rsyslog assumes that it's reading a file that something else is writing to).
What I would suggest is to use something like logger to read the file and deliver the lines to rsyslog, then remove the file after it's all been delivered to rsyslog.
David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.