[syslog-ng] Re: syslog-ng, file source driver

Balazs Scheidler bazsi@balabit.hu
Wed, 1 Mar 2000 23:04:39 +0100


On Wed, Mar 01, 2000 at 11:51:58AM -0800, Alex Schlessinger wrote:
> > > 
> > > what am i doing or understanding incorrectly?
> > 
> > The file source driver is meant to be used on special files like /proc/kmsg.
> > If you want to forward the contents of a real file, you could write a simple
> > script like:
> > 
> > tail -f <logfile> | logger -p local5.info
> 
> understood, this is basically what i ended up doing.
> 
> however, the documentation is misleading..
> 
> http://www.balabit.hu/products/syslog-ng/doc/reference.html#AEN303
> 
> "Of course using this driver you are not limited to special files, you can as well read a
> continuosly growing simple file, and syslog-ng will "follow" appended lines,
> just like tail -f does."

ops, this is a docbug. earlier syslog-ng was able to do this, but this maxed
out CPU usage. It is not possible to decide whether new data arrived to a
file using poll(), since the main loop uses poll to wait for events, it
would be difficult to add this feature. (though not impossible) so for now I
corrected the documentation, and leave this feature addition for 1.5.x.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
     url: http://www.balabit.hu/pgpkey.txt