Re: [Simple-evcorr-users] how not to keep monitored files permanently open (not only) on NFS

2020-02-07 Thread Richard Ostrochovský
hi Risto, thank you for your helpful explanation about inner functionality of SEC. Closed files in my case were not existing, that was the reason. Richard ut 4. 2. 2020 o 23:09 Risto Vaarandi napísal(a): > hi Richard, > > I have never used SEC for monitoring files on NFS file systems, but I ca

Re: [Simple-evcorr-users] how not to keep monitored files permanently open (not only) on NFS

2020-02-07 Thread Richard Ostrochovský
In this context I am also curious, what would be the effect of using --check-timeout / --poll-timeout, if the log file will be closed or remain open during timeout... I am trying to find a way, how to use SEC in "close after read" mode - used to use this mode in previous log event correlation solut

Re: [Simple-evcorr-users] how not to keep monitored files permanently open (not only) on NFS

2020-02-07 Thread Risto Vaarandi
hi Richard, In this context I am also curious, what would be the effect of using > --check-timeout / --poll-timeout, if the log file will be closed or remain > open during timeout... I am trying to find a way, how to use SEC in "close > after read" mode - used to use this mode in previous log even