After I created app_0.log in /var/log/applog/ , I could see log:
2016-09-07T19:52:18+08:00 INFO End of file reached: /var/log/applog/app_0.log. Closing because close_eof is enabled.
Then I deleted app_0.log, but app_0.log was still in registry file.
I guess it's affected by close_eof config. So in this case how can I clean the state of removed file?
And more, when I created many file like app_0.log again and then deleted them , these ERR log appeared continuously:
2016-09-07T20:08:48+08:00 ERR State for /var/log/applog/app_0.log should have been dropped, but couldn't as state is not finished.
And there's also log like this:
2016-09-07T20:25:40+08:00 ERR File is falling under ignore_older before harvesting is finished. Adjust your close_* settings
Shouldn't these ERR logs stop printing again and again ?