inline Sent from my iPhone
> On Dec 30, 2016, at 1:14 PM, David Lang <[email protected]> wrote: > >> On Fri, 30 Dec 2016, Dmitriy Kalinin via rsyslog wrote: >> >> one alternative to above approach is to keep on reloading rsyslog every x >> seconds while rewriting rsyslog config to include all found nested >> directories within one directory. this feels somewhat wrong given that >> imfile seems to lean towards wildcard support (just current impl is >> limited). aside from feeling a bit awkward are there any downsides to >> reloading rsyslog every x seconds (of course we can add some kind of config >> file hashing to see if reload is necessary -- not sure if rsyslog already >> does that by default)? will reload interfere with loaded forwarding rules >> for existing files (especially if files are being logrotated at the same >> time)? > > The first thing would be to check if a full restart is needed or if a HUP is > enough. > > A full restart can take a noticable amount of time, and can cause you to > loose messages because rsyslog wasn't listening (especially with UDP, but > also with TCP) yup sighup is the way to go, but im not sure if that causes any interruption to the system. any thoughts on if frequent sighup-ing (lets say every 5 secs) would affect rsyslog significantly? > so your issue is that the directories that you want rsyslog to watch don't > exist at the time rsyslog is started, correct? right. for example: /logs - exists /logs/foo.log - matches wildcard /logs/new-dir/new-subdir/bar.log - added after start > it sounds like what you are looking for is > https://github.com/rsyslog/rsyslog/issues/1280 though much simpler. only need to specify ideally /logs/**/*.log and rsyslog would pick up all nested files and rescan. > it's listed as a useful enhancement, sponsorship of new features is the > fastest way to get them implemented (either by having someone write and > submit the feature, or by paying a professional services contract with > adiscon). It's usually not very expensive to do so. > David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

