https://community.splunk.com/t5/Splunk-Search/rotating-sylog-file/m-p/73842#M181126 <P>Hi,</P> <P>How is splunk dealing with logfiles which rotate like syslog ? Will splunk loose data during the rotation ?</P> <P>To add some details. I assume Splunk checks on a regular basis if the logfile exists and reads new unindexed data from the logfile. If the logfile is rotated between the Splunk checks data get lost or ?</P> <P>Markus</P> Tue, 13 Sep 2011 00:09:32 GMT huaraz 2011-09-13T00:09:32Z https://community.splunk.com/t5/Splunk-Search/rotating-sylog-file/m-p/73842#M181126 <P>Hi,</P> <P>How is splunk dealing with logfiles which rotate like syslog ? Will splunk loose data during the rotation ?</P> <P>To add some details. I assume Splunk checks on a regular basis if the logfile exists and reads new unindexed data from the logfile. If the logfile is rotated between the Splunk checks data get lost or ?</P> <P>Markus</P> Tue, 13 Sep 2011 00:09:32 GMT https://community.splunk.com/t5/Splunk-Search/rotating-sylog-file/m-p/73842#M181126 huaraz 2011-09-13T00:09:32Z https://community.splunk.com/t5/Splunk-Search/rotating-sylog-file/m-p/73843#M181127 <P>No, it will not. See gkanapathy's answer to this (identical) question: <A href="http://splunk-base.splunk.com/answers/10309/log-file-rotation">http://splunk-base.splunk.com/answers/10309/log-file-rotation</A></P> Tue, 13 Sep 2011 04:15:49 GMT https://community.splunk.com/t5/Splunk-Search/rotating-sylog-file/m-p/73843#M181127 Ayn 2011-09-13T04:15:49Z https://community.splunk.com/t5/Splunk-Search/rotating-sylog-file/m-p/73844#M181128 <P>It answers one part of my question</P> Wed, 14 Sep 2011 08:24:10 GMT https://community.splunk.com/t5/Splunk-Search/rotating-sylog-file/m-p/73844#M181128 huaraz 2011-09-14T08:24:10Z