nxlog windows XP - service restart

Tags:

#1 Dario.Pezzi

Hy, I need some help in configuring my nxlog in windows XP.

System:
S.O. -> windows XP

NXLOG Version -> 2.8.1248

LOGS:
We use a log file for each event and these log files are stored in an hierarchical directory as: f:\year\month\day\accxxxx.txt (e.g. f:\2015\09\03\event000001.txt)

nxlog.conf excerpts:

<Extension multiline>
    Module xm_multiline
    HeaderLine '<?xml version="1.0" encoding="UTF-8" standalone="yes"?>'
</Extension>

<Input in>
    Module       im_file
    File         'E:\\hl7\\' + strftime(now(),"%Y\\\\%m\\\\%d") + '\\AccEvent*.txt'

    SavePos      TRUE
    ReadFromLast TRUE
    PollInterval 15
    Recursive    TRUE

    InputType    multiline

</Input>

I tested these cases:
1. (service nxlog active), add new file in  
f:\2015\09\03\-> nxlog find the new file and analyze [OK]
2. Stop service nxlog, add new file in
f:\2015\09\03\, start service -> nxlog don't find the new file. [X]
3. (service nxlog active), rename a file  in f:\2015\09\03\ already analyzed -> nxlog find the file renamed and analyze (in the log warning input file deleted) [OK]
4. (service nxlog active), update an existing file (same name, change only datetime last modified) -> nxlog don't analyze [OK]

I need to resolve step 2.
If I set ReadFromLast =FALSE when I restart service all fiels are all analyzed and that is not the desiderata.

 


Thanks in advance for your help.

Dario

 

#2 adm Nxlog ✓
#1 Dario.Pezzi
Hy, I need some help in configuring my nxlog in windows XP. System: S.O. -> windows XP NXLOG Version -> 2.8.1248 LOGS: We use a log file for each event and these log files are stored in an hierarchical directory as: f:\year\month\day\accxxxx.txt (e.g. f:\2015\09\03\event000001.txt) ​ nxlog.conf excerpts: <Extension multiline>     Module xm_multiline     HeaderLine '<?xml version="1.0" encoding="UTF-8" standalone="yes"?>' </Extension> <Input in>     Module       im_file     File         'E:\\hl7\\' + strftime(now(),"%Y\\\\%m\\\\%d") + '\\AccEvent*.txt'     SavePos      TRUE     ReadFromLast TRUE     PollInterval 15     Recursive    TRUE     InputType    multiline </Input> I tested these cases: 1. (service nxlog active), add new file in  f:\2015\09\03\-> nxlog find the new file and analyze [OK] 2. Stop service nxlog, add new file in f:\2015\09\03\, start service -> nxlog don't find the new file. [X] 3. (service nxlog active), rename a file  in f:\2015\09\03\ already analyzed -> nxlog find the file renamed and analyze (in the log warning input file deleted) [OK] 4. (service nxlog active), update an existing file (same name, change only datetime last modified) -> nxlog don't analyze [OK] I need to resolve step 2. If I set ReadFromLast =FALSE when I restart service all fiels are all analyzed and that is not the desiderata.   Thanks in advance for your help. Dario  

Did you also test with version 2.9.1347?