Logfile with new events without CRLF or similar - Page 1

#1 platypus4u 4 years ago

Hi I got to set up a log forwarding to a syslog-server. I managed everthing to work except one thing.

The newest event at the end of the logfile has no CR, CRLF, LF or something similar. When a event occurs it is processed when the next event occurs ...

How can I make NXLog to read and process to the end of the file (EOF) in case the file has changed? So far I uses the im_file module.

Thank you for you help Daniel

Permalink

#2 ArkadiyDeactivated Nxlog ✓ 4 years ago

#1 platypus4u

Hi I got to set up a log forwarding to a syslog-server. I managed everthing to work except one thing. The newest event at the end of the logfile has no CR, CRLF, LF or something similar. When a event occurs it is processed when the next event occurs ... How can I make NXLog to read and process to the end of the file (EOF) in case the file has changed? So far I uses the im_file module. Thank you for you help Daniel

Hello Daniel,

Could you share your config along with example of the file you taking events from?

Best regards, Arch