6

I am running rsyslogd 5.8.6 on linux. Other systems on the network use it as a logger. Event rates are very low, and it often happens that the remote message is received, but does not get written out to the /var/log/syslog file until several minutes later.

I have an application that is watching the file and processes it as lines become available, and I need to respond faster to the incoming messages.

I can think of two approaches: either configure rsyslogd to have a zero-size cache buffer, or a 0.5 maximum delay before flushing its buffers, or use some shell command to tell rsyslogd "flush your buffer NOW". I have been unable to find how to do either.

user3457334
  • 171
  • 2
  • 5

1 Answers1

3

cron job:

pkill -HUP rsyslogd

Check your man rsyslogd:

HUP This lets rsyslogd perform close all open files.

Nathan Tuggy
  • 2,237
  • 27
  • 30
  • 38
user86077
  • 31
  • 2