Unix doesn't actually delete a file until no program has it open, if you use
lsof to look for the file, you will see it, along with (deleted).
after you move or rm a file, you need to send rsyslog a HUP signal (or restart
it) before rsyslog closes and re-opens the file
so what you are seeing is 'working as designed', but you are not seeing the
entire situation.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
