[CentOS] rsyslog.conf - why the "-" in this entry? mail.* -/var/log/maillog

Tue Jun 5 15:48:16 UTC 2012
Philippe Naudin <philippe.naudin at supagro.inra.fr>

Le mar. 05 juin 2012 17:06:32 CEST, Leonard den Ottolander a écrit:

> Hello James,
> 
> On Tue, 2012-06-05 at 10:30 -0400, James B. Byrne wrote:
> > In dealing with an unrelated issue I came across this in rsyslog.conf.
> > 
> > # The authpriv file has restricted access.
> > authpriv.*                                       /var/log/secure
> > # Log all the mail messages in one place.
> > mail.*                                           -/var/log/maillog
> > # Log cron stuff
> > cron.*                                           /var/log/cron
> > 
> > Why is there a "-" before /var/log/maillog?
> 
> Better question than it appears at first glance ;) . Nothing in man
> rsyslog.conf on C6, but on C5 man syslog.conf it says under "ACTIONS",
> "Regular File": 
> 
> "You may prefix each entry with the minus ‘‘-’’ sign to omit syncing the
> file  after every logging.  Note that you might lose information if the
> system crashes right behind a write attempt.  Nevertheless  this  might
> give you back some performance, especially if you run programs that use
> logging in a very verbose manner."
> 
> Now whether that minus is still supported under C6 I can't tell you :) .

It seems this is no more necessary.
From http://www.rsyslog.com/doc/v3compatibility.html : "In rsyslog v3,
syncing has been turned off by default."
OTOH, it doesn't hurt do let the minus sign in place.


-- 
Philippe Naudin