On Tue, 17 May 2005 08:39:36 EDT, "Rechtorik, Keith" said:
I am running SUSE 9.1 and I have syslog-ng logging information from our PIX. After a rotate is done the file is compressed and rotated but syslog-ng keeps logging to the compressed file instead of the newly created file. Any help would be greatly appreciated. Here are my conifgs. If you need anymore information I will gladly send it.
/var/log/pix/voclog { rotate 4 daily compress delaycompress postrotate # kill -HUP `cat /var/run/syslog-ng.pid` # /bin/kill -HUP `cat /var/run/syslog-ng.pid 2> /dev/null` 2> /dev/null ||true
Umm.. does it work if you take those '#' comment chars out? Remember, whatever is between 'postrotate' and 'endscript' gets fed to /bin/sh essentially as is. And without the kill -HUP, syslog won't close and re-open the FD, so it keeps appending to the now-compressed file....