刪除了linux系統上/var/log/messages該怎麼？

刪除了linux系統上/var/log/messages該怎麼？

• 安裝lsof
• 查看/var/log/messages文件的進程pid,fd,command
• 恢復/var/log/messages
• 重啓rsyslogd服務

# yum install lsof -y
# lsof|grep /var/log/messages
rsyslogd  12475          root    6w      REG                8,3    172822   33612673 /var/log/messages (deleted)
in:imjour 12475 12477    root    6w      REG                8,3    172822   33612673 /var/log/messages (deleted)
rs:main   12475 12478    root    6w      REG                8,3    172822   33612673 /var/log/messages (deleted)
# less /proc/12475/fd/6 > /var/log/messages  --此時文件已經恢復，但查看時仍是顯示delete
# systemctl restart rsyslog  --重啓就正常了，但pid發生了變化