17 Aug
2007
17 Aug
'07
8:45 a.m.
On Fri, 2007-08-17 at 11:37 +0800, Wilson Lai wrote:
Dear Bill, If there is a Scalix application which generate the log file in "/var/opt/Scalix/ml/s/logs/fatal", where "fatal" is the log file. How could the source be defined to be listened by Syslog-NG?
source s_file { file("/var/opt/Scalix/ml/s/logs/fatal" follow_freq(1)); }; This will read the log file, checking every second if there are new entries. The current position is remembered accross restarts. You need a recent syslog-ng version though (2.0.5 is fine) Read http://www.balabit.com/dl/html/syslog-ng-admin-guide_en.html/ch08s01.html#id... for more information. -- Bazsi