Flume 讀取實時更新的日志文件

http://blog.csdn.net/bright60/article/details/50728306

 

我用了第一種方法。

 

1. 日志文件每天roate一個新文件

 a)  方案一

 

There is no way the tail command itself can automatically switch to the new file with a different name when the date changes. Thus, you have to kill the old tail and start a new one in due time.

while
    tail -F `date +%Y%m%d.log`& sleep $(expr `date +%s -d'day 0'` - `date +%s`)
do  kill $!
done

 

b) 方案二

 

I am using flume-ng exec tailing rotated log files too. Here's my solution:

originAgent.sources.originSource2.type = exec                                                                                                                                             
originAgent.sources.originSource2.command = locktail_rotate.sh /path/to/test.DATE_ROTATE.log 'date +"%Y%m%d"'

And you can checkout locktail_rotate.sh from here. https://github.com/kylelin/locktail

另外一個參考： https://github.com/liuxuan207/TailSource