The imfile module stops pulling logs when the log file it is watching is
truncated. Restarting or sending a HUP signal to the rsyslog process does not
restart the pulling from the log file.
Example:
# cat /etc/rsyslog.d/date.conf
$InputFileName /var/log/date.log
$InputFileTag date_log:
$InputFileStateFile date_log_state
$InputRunFileMonitor
# while true;do
date >> /var/log/date.log
sleep 1
done
# > /var/log/date.log
# /etc/init.d/rsyslog restart OR pkill -HUP rsyslog
Result:
rsyslog stops pulling from /var/log/date.log
Is this a bug or expected behavior?
Thanks, Jesse Hathaway
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards