<div dir="ltr">I realized strace is a unix command and not an option of syslog-ng. Sorry about that.<br><br>After running syslog-ng with strace I found out, what was already known - syslog-ng is trying to write to the destination program but getting a broken pipe error:<br>
<br>This is from the output of strace:<br><br><div style="margin-left: 40px;"><span style="background-color: rgb(204, 204, 204);">598 write(13, "<pri=43> <date=2008-08-27T15:54:"..., 155) = -1 EPIPE (Broken pipe)</span><br style="background-color: rgb(204, 204, 204);">
<span style="background-color: rgb(204, 204, 204);">598 --- SIGPIPE (Broken pipe) @ 0 (0) ---</span><br style="background-color: rgb(204, 204, 204);"><span style="background-color: rgb(204, 204, 204);">598 kill(600, SIGTERM) = 0</span><br>
</div><br>And this is from the catch-all destination file:<br style="background-color: rgb(204, 204, 204);"><div style="margin-left: 40px;"><span style="background-color: rgb(204, 204, 204);"><pri=46> <date=2008-08-27T15:54:35.092-05:00> <host=oracle-test> <msg=syslog-ng[596]: Starting destination program; cmdline='bash /usr/local/bds/logger/syslogAdapterProgram.sh'></span><br style="background-color: rgb(204, 204, 204);">
<span style="background-color: rgb(204, 204, 204);"><pri=45> <date=2008-08-27T15:54:35.101-05:00> <host=oracle-test> <msg=syslog-ng[598]: syslog-ng starting up; version='2.1.11a'></span><br style="background-color: rgb(204, 204, 204);">
<span style="background-color: rgb(204, 204, 204);"><pri=46> <date=2008-08-27T15:54:35.102-05:00> <host=oracle-test> <msg=syslog-ng[598]: Initializing destination file writer; template='/var/log/syslog-ng-catch-all.log', filename='/var/log/syslog-ng-catch-all.log'></span><br style="background-color: rgb(204, 204, 204);">
<span style="background-color: rgb(204, 204, 204);"><pri=43> <date=2008-08-27T15:54:35.174-05:00> <host=oracle-test> <msg=syslog-ng[598]: I/O error occurred while writing; fd='11', error='Broken pipe (32)'></span><br style="background-color: rgb(204, 204, 204);">
<span style="background-color: rgb(204, 204, 204);"><pri=46> <date=2008-08-27T15:54:35.174-05:00> <host=oracle-test> <msg=syslog-ng[598]: Sending child a TERM signal; child_pid='597'></span><br>
</div><br>I guess my question is: are there any configuration options I was over looking, that may resolve this? Or am I not using the Scanner the right way? what can cause a broken IO pipe?<br><br>Thanks.<br><br><div class="gmail_quote">
On Thu, Aug 21, 2008 at 7:25 AM, Balazs Scheidler <span dir="ltr"><<a href="mailto:bazsi@balabit.hu">bazsi@balabit.hu</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">On Wed, 2008-08-20 at 09:10 -0500, midnight codder wrote:<br>
> Thanks for all of those alternatives.<br>
> Allow me to rephrase my question (any idea): Does anyone have any idea<br>
> as to why I am getting the broken pipe?<br>
> The script I am using now is for the sake of simplifying things so I<br>
> can pin point where troubles begin.<br>
> We are not going to use such a script in production.<br>
> The original java program that was supposed to be the destination is<br>
> much more complicated, although in a sense it still reads the log<br>
> messages off of std in, just like the script. (it is the handling of<br>
> the logs afterwards that is complex).<br>
> I shall investigate into using one of the alternatives, however - I<br>
> will still be happy to know what might have went wrong.<br>
<br>
><br>
</div><div class="Ih2E3d">> <priC> <date 08-08-19T15:13:56.198-05:00> <host=oracle-test><br>
> <msg=syslog-ng[27971]: I/O error occurred while writing;<br>
> fd='11', error='Broken pipe (32)'><br>
> <priF> <date 08-08-19T15:13:56.198-05:00> <host=oracle-test><br>
> <msg=syslog-ng[27971]: Sending child a TERM signal;<br>
> child_pid='27972'><br>
<br>
</div>Your script terminates for some reason, it's not syslog-ng that kills<br>
your process, it is your script that dies.<br>
<br>
please run syslog-ng under strace -f (to follow forks) and see why your<br>
shell script exits.<br>
<font color="#888888"><br>
--<br>
Bazsi<br>
</font><div><div></div><div class="Wj3C7c"><br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br>
<br>
</div></div></blockquote></div><br></div>