yes my understanding is when local fluentd daemon has crashed, fluentd-logger will queue up the message internally upto a limit (default to 8M) then drop them?
I was wondering if monitoring the fluentd-logger log for any droppage is the only way to monitor that leg of the journey (i.e. journey between application to fluentd daemon).
Regarding using in_tail plugin, is so that I can reduce chance of message dropping. Although I would need to test how log rotation and modification affects in_tail plugin. I briefly saw its implementation that seems to handle file rotation with inode and pos_file etc.
J