<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.5730.13" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2><SPAN class=403004113-09032011>Hi
all,</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=403004113-09032011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=403004113-09032011>I'm trying to
transmit a huge log file (of about 80k lines) to a centralized syslog server
over TCP</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=403004113-09032011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=403004113-09032011>But, on the syslog
server, I'm receiver only the last part of the log file (of about 7000
lines)</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=403004113-09032011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=403004113-09032011>How can I transmit
the whole log file</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=403004113-09032011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=403004113-09032011>On client, the
syslog-ng.conf file ...</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=403004113-09032011></SPAN></FONT> </DIV>
<DIV><FONT face="Courier New"><SPAN class=403004113-09032011>destination
d_mydest {<BR> tcp("192.168.18.7"
port(5140));<BR>};</SPAN></FONT></DIV>
<DIV><FONT><SPAN class=403004113-09032011><BR><FONT face="Courier New">source
s_src {<BR>file("/some/huge/file.log" follow_freq(1)
log_prefix("mylogs:"));<BR>};</FONT></DIV>
<DIV><FONT face="Courier New"></FONT> </DIV>
<DIV><FONT face="Courier New">log
{<BR>source(s_src);<BR>destination(d_mydest);<BR>};</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV></SPAN></FONT><SPAN class=403004113-09032011><FONT face=Arial size=2>On
server (192.168.18.7) , the conf file ...</FONT></SPAN></DIV>
<DIV><SPAN class=403004113-09032011><FONT face="Courier New">source
s_mysrc{<BR> tcp(ip("192.168.18.7")
port(5140) keep-alive(yes));</FONT></SPAN></DIV>
<DIV><SPAN class=403004113-09032011><FONT
face="Courier New">};</FONT></SPAN></DIV>
<DIV><FONT face="Courier New"></FONT> </DIV><SPAN class=403004113-09032011>
<DIV><SPAN class=403004113-09032011></SPAN><FONT face="Courier New">f<SPAN
class=403004113-09032011>ilter f_filter{ match("mylogs:"); </SPAN><SPAN
class=403004113-09032011>};</SPAN><BR>destination d_mydest
{<BR> file
("/var/log/hosts/$HOST/$YEAR-$MONTH/$YEAR-$MONTH-$DAY/<SPAN
class=403004113-09032011>huge</SPAN>file.log"<BR>
owner(root) group(root) perm(0600) dir_perm(0700)
create_dirs(yes)<BR>
);<BR>};</FONT></DIV>
<DIV><FONT face="Courier New"></FONT> </DIV>
<DIV><FONT face="Courier New">log {<BR>source(s_mysrc);</FONT></DIV>
<DIV><FONT><SPAN class=403004113-09032011></SPAN><FONT face="Courier New">f<SPAN
class=403004113-09032011>ilter(f_filter);</SPAN><BR>destination(d_mydest);<BR>};</FONT></FONT></SPAN></DIV>
<DIV><SPAN class=403004113-09032011><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=403004113-09032011><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial color=#800080 size=2>Thanks and regards,</FONT></DIV>
<DIV><FONT face=Arial color=#800080
size=2><STRONG>Hidayath</STRONG></FONT></DIV>
<DIV><STRONG><FONT face=Arial color=#800080 size=2></FONT></STRONG> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=403004113-09032011> </SPAN></FONT></DIV>
<DIV> </DIV></BODY></HTML>