thanks kenneho - that is something I was looking at.
However, what PID would I kill to effectively restart the service - rsyslog? The external logs are configured thru the rsyslog.conf file. Should I kill the rsyslog PID?
This is what I see for processes...
#ps -aux | grep rsyslog
root 19809 0.0 0.0 44696 1624 ? Sl Jun17 0:14 rsyslogd -c 3
I'm going to try the copytruncate command - see how that works...find out tomorrow morning! Thanks again!