Hello everyone.
I am working on the implementation of the Logfile-Management-Tool (LFMT). We are currently using a selfwritten Archiver-Tool which moves all logfiles into another filesystem. The LFMT does nearly the same except that it does not move the logfiles but rather "copies" them.
Now, the actual problem is that written logfiles remain until the "expire"-value set for the application is reached and the oldest logfile is deleted. With this process it is possible that when a lot of logfiles are written in a small timeframe, logfiles are lost due to them being deleted. On the other hand, when we set the "expire"-value very high to avoid these overflows, there is always alot of overhead in times when there are not that many logfiles written.
A solution that I propose would be to allow the LFMT-Agents on the hosts to delete already pulled logfiles. In this case the "expire"-value could be limitless because the LFMT would regulate itself.
Thanks and best Regards,
Ron Gummich
#ArchitectureandDesign------------------------------
Ron Gummich
Deutsche Telekom AG
------------------------------