Let me know how the support ticket works out for you. I have the same issue at my site! Evan. On 01/15/2016 12:58 PM, Scheidler, Balázs wrote:
How do you run syslog-ng on Windows? Is it a PE binary? For that you can get support through official support channels. I can help you to the proper contact if you want. Or is it a cygwin issue?
On Jan 15, 2016 5:41 PM, "Artyom Gavrichenkov" <ximaera@gmail.com <mailto:ximaera@gmail.com>> wrote:
Hi all,
Since Windows Vista (and Server 2012), in NTFS, file size is updated not when its contents are being flushed to disk, but when the last handle to the corresponding file object is closed. More on that here: https://blogs.msdn.microsoft.com/oldnewthing/20111226-00/?p=8813
What this means in practice is that an application log file might already be quite large, but its reported file size will still be zero unless some other application will open(), read() and then close() it. And seems like it breaks syslog-ng’s source() file() handler in case the filename in file() arguments contains wildcards.
Could anyone please look into it?
| Artyom Gavrichenkov | gpg: fa1c670e | mailto: ximaera@gmail.com <mailto:ximaera@gmail.com> | xmpp: ximaera@gmail.com <mailto:ximaera@gmail.com> | tel. no: +7 916 515 49 58 <tel:%2B7%20916%20515%2049%2058> ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq