Ask questions. Get answers. Find technical product solutions from passionate experts in the NXLog community.
Offline caching not working as expected
Hi, First time post so please go easy.... I have a simplet test Windows 2008 server with nxlog installed with the following config file. define ROOT C:\Program Files (x86)\nxlog Moduledir %ROOT%\modules CacheDir %ROOT%\data Pidfile %ROOT%\data\nxlog.pid SpoolDir %ROOT%\data LogFile %ROOT%\data\nxlog.log <Extension _syslog> Module xm_syslog </Extension> <Input file_in> Module im_file File 'D:\\01\\syslogtest.txt' Exec $Message = $raw_event; SavePos True ReadFromLast True </Input> <Processor file_transformer> Module pm_transformer Exec $SourceName = 'offline_testing'; OutputFormat syslog_bsd </Processor> <Output file_out> Module om_udp Host syslog.domain.com Port 10000 </Output> <Route file_route> Path file_in => file_transformer => file_out </Route> I'm sending my logs to a syslog server running syslog-ng. When the server is available, everything is good. What I write to the local Windows text file appears on the syslog-ng server. I enable Windows firewall to simulate the syslog-ng server down. I write to the local Windows text file and nothing appears in syslog-ng. As expected. I remove the firewall rule and here is where my problem lies. I don't see what was written to the local text file while the syslog-ng was unavailable on the syslog-ng server. If I start writing to the text file after disabling the firewall, I see the new stuff coming in but not what was written while the syslog server was "offline". Can anybody help figure out why this is not working as expected? Regards, Victor
Replies: 1View post »