Nate<br>
<br>
thanks for your reply ! I am already using keepalive on the server :<br>
<br>
tcp (ip("**********")<br>
port(5000)<br>
max-connections(1000)<br>
keep-alive(yes)); };<br>
<br>
It doesn't look like I can specify this option on the client though. If I try something like :<br>
destination loghost { tcp("*********" port(5000) keep-alive(yes)); };<br>
<br>
It complains about a syntax error. I have never seen an option called 'tcp-keep-alive()' but I tried it without<br>
luck. It always complains about a syntax error. I guess you meant 'keep-alive(yes)' right ?<br>
<br>
As far as upgrading is concerned I want to but I wanted to wait till 2.0 is out and stable. Any ETA ?<br>
<br><br>
--stucky<br>
<br><div><span class="gmail_quote">On 3/2/06, <b class="gmail_sendername">Nate Campi</b> <<a href="mailto:nate@campin.net">nate@campin.net</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On Tue, Feb 28, 2006 at 11:09:43AM -0800, stucky wrote:<br>> guys<br>><br>> I've been pulling my hair out here. I gonna go insane....<br>><br>> Here's the story.<br>><br>> I first setup syslog-ng-1.6.6
for remote syslogging a year ago.<br>><br>> I seemed to work out great - all my stuff appeared to be logged remotely<br>> and everything was dandy.<br>> Then I decided to come up with some sort of check that would tell me if a
<br>> machine was not logging remotely anymore<br>> cause of network problems or whatever.<br><br>I'm thinking that since you use TCP that perhaps the messages only come<br>through once in a while, and since the first message sent when a TCP
<br>connection comes up used to be lost (might still be, but I remember<br>Bazsi coming up with a workaround/fix at some point) then you might<br>actually lose messages the way you report.<br><br>Either try using UDP for a short while or try tcp-keep-alive() to keep
<br>the connection up. Also review the changelogs to see if a newer version<br>fixes this behavior (probably a good idea to upgrade anyways).<br><br>HTH,<br>--<br>Nate<br><br>He may look like an idiot and talk like an idiot but don't let that fool
<br>you. He really is an idiot. - Groucho Marx<br><br>_______________________________________________<br>syslog-ng maillist - <a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a><br><a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">
https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>Frequently asked questions at <a href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a><br><br>
</blockquote></div>