Flume 读取实时更新的日志文件

最新推荐文章于 2024-04-10 16:44:49 发布

bright60

最新推荐文章于 2024-04-10 16:44:49 发布

阅读量6.4k

点赞数 2

本文链接：https://blog.csdn.net/bright60/article/details/50728306

版权

1. 日志文件每天roate一个新文件

a) 方案一

There is no way the tail command itself can automatically switch to the new file with a different name when the date changes. Thus, you have to kill the old tail and start a new one in due time.

while
    tail -F `date +%Y%m%d.log`& sleep $(expr `date +%s -d'day 0'` - `date +%s`)
do  kill $!
done

b) 方案二

I am using flume-ng exec tailing rotated log files too. Here's my solution:

originAgent.sources.originSource2.type = exec                                                                                                                                             
originAgent.sources.originSource2.command = locktail_rotate.sh /path/to/test.DATE_ROTATE.log 'date +"%Y%m%d"'

And you can checkout locktail_rotate.sh from here. https://github.com/kylelin/locktail

另外一个参考： https://github.com/liuxuan207/TailSource