客户端把rsyslog重启,就会发送全部日志 --待研究

客户端:
uat-web02:/var/log/nginx# echo "scan-cccc21231">>scan.log 
uat-web02:/var/log/nginx# cat scan.log 
scan-aaaaaaaaaaaaa
bbbbb21231
scan-bbbbb21231
scan-cccc21231



服务端:
zjtest7-frontend:/data/scan# cat scan.2016-09-25 
 scan-bbbbb21231
 scan-cccc21231
 
 
 
 
 
 客户端重启；
 
 
 
 
 服务端收到的数据；
 
 zjtest7-frontend:/data/scan# cat scan.2016-09-25 
 scan-bbbbb21231
 scan-cccc21231
 scan-aaaaaaaaaaaaa
 bbbbb21231
 scan-bbbbb21231
 scan-cccc21231
 scan-dddd9999
zjtest7-frontend:/data/scan# wc -l scan.2016-09-25 
7 scan.2016-09-25

再次重启客户端:
uat-web02:/var/log/nginx# cat scan.log 
scan-aaaaaaaaaaaaa
bbbbb21231
scan-bbbbb21231
scan-cccc21231
scan-dddd9999


服务端:
zjtest7-frontend:/data/scan# cat scan.2016-09-25 
 scan-bbbbb21231
 scan-cccc21231
 scan-aaaaaaaaaaaaa
 bbbbb21231
 scan-bbbbb21231
 scan-cccc21231
 scan-dddd9999
 scan-aaaaaaaaaaaaa
 bbbbb21231
 scan-bbbbb21231
 scan-cccc21231
 scan-dddd9999
zjtest7-frontend:/data/scan# wc -l scan.2016-09-25 
12 scan.2016-09-25


也就是说 只要客户端把rsyslog重启,就会发送全部日志



uat-web02:/root/soft/rsyslog-8.15.0/tools# service rsyslog start
Starting system logger: usage: rsyslogd [options]
use "man rsyslogd" for details. To run rsyslog interactively, use "rsyslogd -n"to run it in debug mode use "rsyslogd -dn"
For further information see http://www.rsyslog.com/doc
                                                           [FAILED]