<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Thank you for the fast reply.<br>
<br>
I think that the problem it's /etc/logrotate.d/syslog-ng:<br>
<blockquote type="cite">/var/log/syslog {<br>
rotate 7<br>
daily<br>
compress<br>
<font color="#ff0000"># postrotate<br>
# /etc/init.d/syslog-ng reload >/dev/null<br>
# endscript</font><br>
}<br>
<br>
/var/log/syslog-remote/user {<br>
create 0664 root<br>
rotate 365<br>
daily<br>
create 0644<br>
missingok<br>
compress<br>
<font color="#ff0000"> postrotate<br>
/etc/init.d/syslog-ng reload >/dev/null<br>
endscript</font><br>
}</blockquote>
First "postrotate" was in /var/log/syslog<br>
Now i changed at the last rotation /var/log/syslog-remote/user (this is
my custom destination)<br>
Therefore, I believe, logrotate restart syslog-ng BEFORE the last
rotation; is that rights??<br>
<br>
I hope that now works!!<br>
<br>
Thank you VERY VERY MUCH Peter!!!<br>
<br>
Regards,<br>
Tokie<br>
<br>
P.S.:<br>
Peter, what is, in your logrotate.conf, <b><u><i>"dateext"</i></u></b>
????<br>
<br>
Höltzl Péter ha scritto:
<blockquote cite="mid:1262721248.14108.5.camel@papa" type="cite">
<pre wrap="">On Tue, 2010-01-05 at 19:11 +0100, Tokie wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi For All,
i have a strange problem.
On my server syslog (on Debian Etch) I installed syslog-ng and some
times syslog-ng don't works!!!
The programs is in execution, but don't receive the log in destination
files;
Logrotate makes the new file (ex. /var/log/syslog/new) and compress the
last with gz; this works!!
But the new file remains empty!!
If I restart the syslog-ng with /etc/init.d/syslog-ng restart(like below
</pre>
</blockquote>
<pre wrap=""><!---->
Please send your logrotate.conf. My conf looks like this:
/var/log/messages {
rotate 7
daily
compress
dateext
postrotate
/etc/init.d/syslog-ng reload >/dev/null
endscript
}
As you can see it restarts syslog-ng after rotation. There is another
solution without restart. It is the copytruncate option. So the file is
not removed (but only cleaned) therefore the inode is not changed (no
need for syslog-ng restart).
I hope it helps.
Regards,
Peter
</pre>
</blockquote>
<br>
</body>
</html>