On Tue, 17 Oct 2017, emaleth wrote:
Because it was still in the $Work Directory, it disappeared only after
restarting rsyslog.
That doesn't mean that the logs weren't sent.
Rsyslog creates a file when it first starts to spill to disk, but it doesn't
delete the file when empty because that would cause a race condition with
another thread trying to write out to the file.
So once you start to spill to disk, the last file for that queue will remain
until rsyslog shuts down and it knows that there is no chance of needing to use
the file.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.