[rsyslog-notify] Forum Thread: Re: Sending only new logs. - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24555#p24555

Message: 
----------
rsyslog only sends logs that you give it, so if you don't want to have it
send old logs, don't send the old logs to rsyslog.

If you are talking about imfile, the problem is that rsyslog has no idea
what logs are new and what are old the first time it looks at a file. After
that, it keeps track of where in the file it is to not send older logs. I
believe there is an option to tell imfile to not send anything currently in
the file, only new things that appear, but that may only be on new
versions.