客户端把rsyslog重启,就会发送全部日志 --待研究

时间:2023-03-08 16:30:03
客户端:
uat-web02:/var/log/nginx# echo "scan-cccc21231">>scan.log
uat-web02:/var/log/nginx# cat scan.log
scan-aaaaaaaaaaaaa
bbbbb21231
scan-bbbbb21231
scan-cccc21231 服务端:
zjtest7-frontend:/data/scan# cat scan.2016-09-25
scan-bbbbb21231
scan-cccc21231 客户端重启; 服务端收到的数据; zjtest7-frontend:/data/scan# cat scan.2016-09-25
scan-bbbbb21231
scan-cccc21231
scan-aaaaaaaaaaaaa
bbbbb21231
scan-bbbbb21231
scan-cccc21231
scan-dddd9999
zjtest7-frontend:/data/scan# wc -l scan.2016-09-25
7 scan.2016-09-25 再次重启客户端:
uat-web02:/var/log/nginx# cat scan.log
scan-aaaaaaaaaaaaa
bbbbb21231
scan-bbbbb21231
scan-cccc21231
scan-dddd9999 服务端:
zjtest7-frontend:/data/scan# cat scan.2016-09-25
scan-bbbbb21231
scan-cccc21231
scan-aaaaaaaaaaaaa
bbbbb21231
scan-bbbbb21231
scan-cccc21231
scan-dddd9999
scan-aaaaaaaaaaaaa
bbbbb21231
scan-bbbbb21231
scan-cccc21231
scan-dddd9999
zjtest7-frontend:/data/scan# wc -l scan.2016-09-25
12 scan.2016-09-25 也就是说 只要客户端把rsyslog重启,就会发送全部日志 uat-web02:/root/soft/rsyslog-8.15.0/tools# service rsyslog start
Starting system logger: usage: rsyslogd [options]
use "man rsyslogd" for details. To run rsyslog interactively, use "rsyslogd -n"to run it in debug mode use "rsyslogd -dn"
For further information see http://www.rsyslog.com/doc
[FAILED]