How to accommodate logs from the rsyslog clients from older dates to the respective date folders at the rsyslog server end?
Issue
- We have a setup in which we send all our system logs to a remote rsyslog server for centralized storage. For this we have configured rsyslog remote server & clients server. It was running fine until we came across following scenario:
The lun in which all the logs are stored on a remote server was out of space for over a month.
Now the problem which came is that the logs of the servers have merged in a directory of the date on which, space was cleaned for new logs to be logged for each server.
- Following the disruption of the rsyslog traffic between the rsyslog clients and the rsyslog server for a week when we restored the rsyslog traffic, all the logs from the rsyslog clients got collected in file of the current date at the rsyslog server end. We do not want this behaviour , we would like to receive the files in the respective date folders at the rsyslog server end.
Environment
- Red Hat Enterprise Linux
- rsyslog
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
