[rsyslog-notify] Forum Thread: Re: imfile seems to just stop reading files - (Mode 'reply')

[noreply at adiscon.com]

User: vizette 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26836#p26836

Message: 
----------
[quote="dlang":36haif4h]are the logs being rotated via logrotate being
truncated or renamed? do you HUP rsyslog after the
rotation?[/quote:36haif4h]

copytruncate is [i:36haif4h]not[/i:36haif4h] specified so it's my
understanding that they are renamed and a new file is created.  rsyslog is
then sent a HUP in postrotate.  It may be worth noting that rsyslog get's
HUPed several times on these servers within a few seconds when rotate runs
(a couple for different apps, plus the syslog rotation).

Here is one of the app logrotate confs:

[code:36haif4h]{
  daily
  missingok
  notifempty
  delaycompress
  sharedscripts
  postrotate
    /bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null
|| true
    /bin/kill -HUP `cat /var/run/rsyslogd.pid 2> /dev/null` 2>
/dev/null || true
  endscript
}[/code:36haif4h]