<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hmm - the version shouldn't be the issue as far as I know.<br>
<br>
You might try tracing the syslog-ng process when the file source is
appended to.<br>
<br>
Pretty basic I know - but it might give an indication of what
is/is-not happening.<br>
<br>
Also - have you tried with "follow_freq" specified?<br>
<br>
Jim<br>
<br>
<div class="moz-cite-prefix">On 07/18/2014 04:14 AM, Rafał Radecki
wrote:<br>
</div>
<blockquote
cite="mid:CAHd9_iT116YLNwZCjbnkxnic-On0crFCOOTXELVc1jFF3sFCow@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>
<div>
<div>Hi All ;)<br>
<br>
</div>
I am using a virtual machine with:<br>
Red Hat Enterprise Linux Server release 5.7 (Tikanga)<br>
Linux logserver01 2.6.18-274.el5 #1 SMP Fri Jul 8
17:36:59 EDT 2011 x86_64 x86_64 x86_64 GNU/Linux<br>
</div>
syslog-ng 2.1.4<br>
<br>
</div>
I have following configuration:<br>
<br>
...<br>
9 options {<br>
10 create_dirs (yes);<br>
11 dir_group (root);<br>
12 dir_owner (root);<br>
13 dir_perm (0700);<br>
14 group (root);<br>
15 owner (root);<br>
16 perm (0600);<br>
17 flush_lines(1);<br>
18 flush_timeout (1000);<br>
19 keep_hostname (yes);<br>
20 log_fifo_size (1);<br>
21 use_dns (no);<br>
22 use_fqdn (no);<br>
23 };<br>
...<br>
39 source s_stdout {<br>
40 # file ("/logs/stdout.log" flags(no-parse)
follow_freq(1));<br>
41 file ("/logs/stdout.log" flags(no-parse));<br>
42 };<br>
...<br>
61 destination d_stdout {
file("/var/log/$YEAR$MONTH$DAY/stdout"); };<br>
...<br>
80 log { source(s_stdout); destination(d_stdout); };<br>
<br>
</div>
The problem is that changes in /logs/stdout.log are only
visible in /var/log/20140717/stdout when I perform
/etc/init.d/syslog-ng reload or restart. I tried several
settings of flush_*, log_fifo_size and follow_freq but with
no luck :D<br>
<br>
</div>
Is it a problem withe the version that I use (quite old :D )
or is there a mistake in my configuration maybe?<br>
<br>
</div>
BR,<br>
Rafal.</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
</pre>
</blockquote>
<br>
</body>
</html>