On Fri, Dec 13, 2019 at 01:21:38PM +0100, mj wrote: > Hi, > > I'm sure this is a faq, but I cannot find the answer. :-( > > On debian 9, rsyslog with some rules to log to certain specific files. > > Now: when I: > - stop rsyslog > - delete those specific log files Which files do you delete? How do you do it? > - reboot my server > > I would expect to find only *new* and *recent* log lines in those files. > > However: old entries are appearing also, up to weeks ago. So it > seems rsyslog actually noticies that those entries are not in the > files, and adds them again. I don't think rsyslog is doing that :-) It might look /as if/ rsyslog did that. That's why I asked for some details. So the more details you provide, the easier to solve the puzzle. Cheers -- tomás
Attachment:
signature.asc
Description: Digital signature