1
response

Hy, I need some help in configuring my nxlog in windows XP.

System:
S.O. -> windows XP

NXLOG Version -> 2.8.1248

LOGS:
We use a log file for each event and these log files are stored in an hierarchical directory as: f:\year\month\day\accxxxx.txt (e.g. f:\2015\09\03\event000001.txt)

nxlog.conf excerpts:

<Extension multiline>
    Module xm_multiline
    HeaderLine '<?xml version="1.0" encoding="UTF-8" standalone="yes"?>'
</Extension>

<Input in>
    Module       im_file
    File         'E:\\hl7\\' + strftime(now(),"%Y\\\\%m\\\\%d") + '\\AccEvent*.txt'

    SavePos      TRUE
    ReadFromLast TRUE
    PollInterval 15
    Recursive    TRUE

    InputType    multiline

</Input>

I tested these cases:
1. (service nxlog active), add new file in  
f:\2015\09\03\-> nxlog find the new file and analyze [OK]
2. Stop service nxlog, add new file in
f:\2015\09\03\, start service -> nxlog don't find the new file. [X]
3. (service nxlog active), rename a file  in f:\2015\09\03\ already analyzed -> nxlog find the file renamed and analyze (in the log warning input file deleted) [OK]
4. (service nxlog active), update an existing file (same name, change only datetime last modified) -> nxlog don't analyze [OK]

I need to resolve step 2.
If I set ReadFromLast =FALSE when I restart service all fiels are all analyzed and that is not the desiderata.

 

Thanks in advance for your help.

Dario

 

AskedSeptember 3, 2015 - 1:31am

Answer (1)