The issue I have is that the current log file is set to a 1200 permission the agent that reads logs is unable to read the current log file, and even though the symlink has sufficient permissions the agent is unable to read application.log either. The end result is that we are not able to collect logs until the file rotates so we are always a day behind.
I am unable to make the current log file readable- it stays in write-only mode until it is rotated out.
Example:
This results in the following:
The issue I have is that the current log file is set to a 1200 permission the agent that reads logs is unable to read the current log file, and even though the symlink has sufficient permissions the agent is unable to read application.log either. The end result is that we are not able to collect logs until the file rotates so we are always a day behind.