<p dir="ltr">How do you run syslog-ng on Windows? Is it a PE binary? For that you can get support through official support channels. I can help you to the proper contact if you want.<br>
Or is it a cygwin issue?</p>
<div class="gmail_quote">On Jan 15, 2016 5:41 PM, "Artyom Gavrichenkov" <<a href="mailto:ximaera@gmail.com">ximaera@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi all,<br>
<br>
Since Windows Vista (and Server 2012), in NTFS, file size is updated<br>
not when its contents are being flushed to disk, but when the last<br>
handle to the corresponding file object is closed. More on that here:<br>
<a href="https://blogs.msdn.microsoft.com/oldnewthing/20111226-00/?p=8813" rel="noreferrer" target="_blank">https://blogs.msdn.microsoft.com/oldnewthing/20111226-00/?p=8813</a><br>
<br>
What this means in practice is that an application log file might<br>
already be quite large, but its reported file size will still be zero<br>
unless some other application will open(), read() and then close() it.<br>
And seems like it breaks syslog-ng’s source() file() handler in case<br>
the filename in file() arguments contains wildcards.<br>
<br>
Could anyone please look into it?<br>
<br>
| Artyom Gavrichenkov<br>
| gpg: fa1c670e<br>
| mailto: <a href="mailto:ximaera@gmail.com">ximaera@gmail.com</a><br>
| xmpp: <a href="mailto:ximaera@gmail.com">ximaera@gmail.com</a><br>
| tel. no: <a href="tel:%2B7%20916%20515%2049%2058" value="+79165154958">+7 916 515 49 58</a><br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>