Hi list,<div><br></div><div>I'm using syslog-ng (3.2.4) to follow some nginx log files using these directives:</div><div><br></div><div>source s_nginx_logs {</div><div><div> file("/path/to/nginx/access.log" flags(no-parse));</div>
</div><div>}</div><div><br></div><div>When syslog-ng is reloaded, either for its own log files rotation or because a configuration update (which happens regularly when a new site is added), it does not see new data being written in followed files while it is reloading itself, and then complains about file size having changed and retransmit the whole file to my central log file collector.</div>
<div><br></div><div>Here is the warning message:</div><div><div>syslog-ng[24608]: The current log file has a mismatching size/inode information, restarting from the beginning; state='affile_sd_curpos(/path/to/nginx/access.log) stored_inode='139419', cur_file_inode='139419', stored_size='985114', cur_file_size='997815', raw_stream_pos='1995630'</div>
</div><div><br></div><div>I don't see how to handle that correctly. </div><div><br></div><div>Any idea ?</div><div><br></div><div><br></div><div><br></div>