客户端把rsyslog重启,就会发送全部日志 --待研究

客户端:
uat-web02:/var/log/nginx# echo "scan-cccc21231">>scan.log
uat-web02:/var/log/nginx# cat scan.log
scan-aaaaaaaaaaaaa
bbbbb21231
scan-bbbbb21231
scan-cccc21231

服务端:
zjtest7-frontend:/data/scan# cat scan.2016-09-25
scan-bbbbb21231
scan-cccc21231

客户端重启；

服务端收到的数据；

zjtest7-frontend:/data/scan# cat scan.2016-09-25
scan-bbbbb21231
scan-cccc21231
scan-aaaaaaaaaaaaa
bbbbb21231
scan-bbbbb21231
scan-cccc21231
scan-dddd9999
zjtest7-frontend:/data/scan# wc -l scan.2016-09-25
7 scan.2016-09-25

再次重启客户端:
uat-web02:/var/log/nginx# cat scan.log
scan-aaaaaaaaaaaaa
bbbbb21231
scan-bbbbb21231
scan-cccc21231
scan-dddd9999

服务端:
zjtest7-frontend:/data/scan# cat scan.2016-09-25
scan-bbbbb21231
scan-cccc21231
scan-aaaaaaaaaaaaa
bbbbb21231
scan-bbbbb21231
scan-cccc21231
scan-dddd9999
scan-aaaaaaaaaaaaa
bbbbb21231
scan-bbbbb21231
scan-cccc21231
scan-dddd9999
zjtest7-frontend:/data/scan# wc -l scan.2016-09-25
12 scan.2016-09-25

也就是说 只要客户端把rsyslog重启,就会发送全部日志

uat-web02:/root/soft/rsyslog-8.15.0/tools# service rsyslog start
Starting system logger: usage: rsyslogd [options]
use "man rsyslogd" for details. To run rsyslog interactively, use "rsyslogd -n"to run it in debug mode use "rsyslogd -dn"
For further information see http://www.rsyslog.com/doc [FAILED]