[rsyslog-notify] Forum Thread: Re: imfile seems to just stop reading files - (Mode 'reply')

[noreply at adiscon.com]

User: kkoppel 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25515#p25515

Message: 
----------
I have now been running rsyslogd in debug mode for over a week. I have the
actual debug logging turned off most of the time and turn it on only for a
few seconds every time logs are rotated. So far imfile has stopped reading
new log files only once and that seems to be a different bug (basically it
never stops monitoring files that have been moved away and eventually runs
into the fs.inotify.max_user_watches limit). I reported this issue
separately (<!-- m --><a class="postlink"
href="https://github.com/rsyslog/rsyslog/issues/324">https://github.com/rsyslog/rsyslog/issues/324</a><!--
m -->). Since the volume of logs is pretty constant (if not rising), then I
seriously doubt the original issue had anything to do with this.

I will continue to run rsyslogd in debug mode for now and will report back
if I find anything interesting. Any suggestions for alternative ways to
debug this issue would be greatly appreciated.