<div class="gmail_extra"><span style="font-family:arial,sans-serif;font-size:13px">> --preprocess-into only tells syslog-ng to write the processed config to</span><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px">> a file, it will then proceed to do whatever else it would've done</span><br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">> without the option. That's a bit counter-intuitive, I agree. You can use</span><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px">> the --syntax-only (-s) option to just write the file and exit without</span><br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">> doing anything else.</span><br>
<br>Got it, thanks!</div><div class="gmail_extra"><br></div><div class="gmail_extra"><span style="font-family:arial,sans-serif;font-size:13px">> Can you show your global settings, by any chance? Also, what @version </span><span style="font-family:arial,sans-serif;font-size:13px">does your syslog-ng.conf have?</span><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px">> (This is most likely in your global settings)</span><br><div class="gmail_extra"># Global:</div><div class="gmail_extra">options {</div><div class="gmail_extra">
threaded (yes);</div><div class="gmail_extra"> time_reopen (10);</div><div class="gmail_extra"> chain_hostnames (off);</div><div class="gmail_extra"> use_dns (yes);</div><div class="gmail_extra"> dns_cache (yes);</div>
<div class="gmail_extra"> dns_cache_size (2000);</div><div class="gmail_extra"> dns_cache_expire (86400);</div><div class="gmail_extra"> use_fqdn (no);</div><div class="gmail_extra"> keep_hostname (yes);</div>
<div class="gmail_extra"> stats_freq (0);</div><div class="gmail_extra"> stats_level (1);</div><div class="gmail_extra"> log_msg_size (16384);</div><div class="gmail_extra"> log_fifo_size (8000000);</div><div class="gmail_extra">
};</div><div class="gmail_extra"><br></div><div class="gmail_extra"># Version:</div><div class="gmail_extra">@version: 3.3</div><div class="gmail_extra"><br></div><div class="gmail_extra"># Sources<br></div><div class="gmail_extra">
<div class="gmail_extra">source s_local {</div><div class="gmail_extra"> file ("/proc/kmsg" program_override("kernel: "));</div><div class="gmail_extra"> unix-stream ("/dev/log");</div>
<div class="gmail_extra">};</div><div class="gmail_extra"><br></div><div class="gmail_extra">source s_local_internal {</div><div class="gmail_extra"> internal();</div><div class="gmail_extra">};</div><div class="gmail_extra">
<br></div><div class="gmail_extra">source s_remote {</div><div class="gmail_extra"> udp(ip(0.0.0.0) port(514) so_rcvbuf(1024000)); # Switches are configured to send logs here</div><div class="gmail_extra"> tcp(ip(0.0.0.0) port(5140) max-connections(250) so_rcvbuf(1024000) log_iw_size(20000) so_keepalive(yes) log_fetch_limit(100));</div>
<div class="gmail_extra"> syslog(ip(0.0.0.0) transport("tcp") port(5141) max-connections(200) log_iw_size(20000) flags("threaded") log_fetch_limit(100));</div><div class="gmail_extra">};</div><div class="gmail_extra">
<br></div><div class="gmail_extra"># TCP and UDP source for each app</div><div class="gmail_extra"><% @apps.each do |app| %><br></div><div class="gmail_extra">source s_remote_<%= app[:id] %> {<br></div><div class="gmail_extra">
syslog(ip(0.0.0.0) transport("tcp") port(<%= app[:syslog][:port] %>) max-connections(100) log_iw_size(20000) flags("threaded") log_fetch_limit(100));</div><div class="gmail_extra">};</div><div class="gmail_extra">
source s_remote_udp_<%= app[:id] %> {</div><div class="gmail_extra"> udp(ip(0.0.0.0) port(<%= app[:syslog][:udp_port] so_rcvbuf(1024000)); # HAproxy</div><div class="gmail_extra">};</div><div class="gmail_extra">
<% end %></div><div><br></div></div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><br><br><div class="gmail_quote">On Tue, Dec 11, 2012 at 12:28 AM, Gergely Nagy <span dir="ltr"><<a href="mailto:algernon@balabit.hu" target="_blank">algernon@balabit.hu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div id=":29c">--preprocess-into only tells syslog-ng to write the processed config to<br>
a file, it will then proceed to do whatever else it would've done<br>
without the option. That's a bit counter-intuitive, I agree. You can use<br>
the --syntax-only (-s) option to just write the file and exit without<br>
doing anything else.</div></blockquote></div><br><br clear="all"><div><br></div>-- <br>Best regards,<br>Koldaev Anton<br>
</div>