[rsyslog] Reliability questions about rsyslog and capabilities.

Sivan Greenberg sivan at omniqueue.com
Sun Sep 19 16:37:57 CEST 2010


On Thu, Sep 16, 2010 at 7:07 PM, Rainer Gerhards
<rgerhards at hq.adiscon.com> wrote:
> That depends on a number of factors, including the template itself as well as
> the message format from the source.
>

Right, so I managed to successfully combine the formats and achieve
what I wanted! Thanks :)

And on to another related reliability issue:

When a log file part of an action is being accidentally erased,
messages never re-appear in it. Is there a way to treat it as a
forward target e.g. have it recreated with all the messages that
failed writing to that file when the file is re-created? Come to think
of it, is there a way to have rsyslog recreate the file after it has
been deleted ? This is not much a problem in the client machine, but
if it is in the master final endpoint server machine for the logs that
losing the file entries without ability to recreate essentially means
complete message loss. So a way to get them out of the disk queue must
exist! :-)

What's the right way to handle this?

Your replies have been muchly appreciated and very helpful so far , Thanks!

-Sivan



More information about the rsyslog mailing list