[syslog-ng] feature request?: monitor open logs for deletion/rename

Gergely Nagy algernon at balabit.hu
Thu Jul 12 11:40:10 CEST 2012

Balazs Scheidler <bazsi77 at gmail.com> writes:

> no need to use inotify for this. merely stating the file regularly
> should indicate the new file with a changed inode number.

But inotify has the benefit of not needing regular polls, and immediate
notification when files change. I wouldn't want it for performance,
because it wouldn't give a noticable boost in this case. I like inotify
better in this case because of responsiveness, and effectiveness.

For example, if my low-power system is happily idling, I'd rather not
have syslog-ng regularly stat files and wake up the disk. However, if
the kernel signals us that hey, this stuff here changed, that's much
more efficient.

Sadly, I don't have such a system where it would make any difference,
but still! :P

> i was thinking about a separate operation to reopen files
> (e.g. syslog-ng-ctl reopen-files) to avoid having to reload the
> configuration, but this idea seems simpler to implement.

syslog-ng-ctl reopen-files could be useful nevertheless, for different


More information about the syslog-ng mailing list