Thanks for no answer, but i resolved my problem.
my problem was on logrotate, so i saw some solutions like crontab to restart rsyslog, but the log info between logrotate and crontab(rsyslog)will be lost if you use this solution.
So, instead use the cron solution i've inserted the command to restart rsyslog into the postrotate section under /etc/logrotate.d/zimbra, like following:
#vim /etc/logrotate.d/zimbra
/var/log/zimbra.log {
daily
missingok
notifempty
create 0644 zimbra zimbra
postrotate
killall -HUP rsyslogd 2> /dev/null || true
su - zimbra -c "/opt/zimbra/bin/zmswatchctl restart" > /dev/null 2>&1 || true
/etc/init.d/rsyslog restart
endscript
compress
}
/var/log/zimbra-stats.log {
daily
missingok
notifempty
create 0644 zimbra zimbra
postrotate
killall -HUP rsyslogd 2> /dev/null || true
su - zimbra -c "/opt/zimbra/bin/zmlogswatchctl restart" > /dev/null 2>&1 || true
/etc/init.d/rsyslog restart
endscript
rotate 0
}
best greets from brazil!!
