<div dir="ltr"><div><div><div>Hi,<br><br></div>I can't remember when syslog-ng started to support following files properly, but that actually may have happened way past 2.1.x (3.0.x probably).<br><br></div>I would strongly recommend to upgrade, supporting that ancient version (probably over a decade old) is not really feasible.<br>
<br></div>Bazsi<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Jul 18, 2014 at 10:14 AM, Rafał Radecki <span dir="ltr"><<a href="mailto:radecki.rafal@gmail.com" target="_blank">radecki.rafal@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div><div>Hi All ;)<br><br></div>I am using a virtual machine with:<br>Red Hat Enterprise Linux Server release 5.7 (Tikanga)<br>
Linux logserver01 2.6.18-274.el5 #1 SMP Fri Jul 8 17:36:59 EDT 2011 x86_64 x86_64 x86_64 GNU/Linux<br>
</div>syslog-ng 2.1.4<br><br></div>I have following configuration:<br><br>...<br> 9 options {<br> 10 create_dirs (yes);<br> 11 dir_group (root);<br> 12 dir_owner (root);<br> 13 dir_perm (0700);<br>
14 group (root);<br> 15 owner (root);<br> 16 perm (0600);<br> 17 flush_lines(1);<br> 18 flush_timeout (1000);<br> 19 keep_hostname (yes);<br> 20 log_fifo_size (1);<br>
21 use_dns (no);<br> 22 use_fqdn (no);<br> 23 };<br>...<br> 39 source s_stdout {<br> 40 # file ("/logs/stdout.log" flags(no-parse) follow_freq(1));<br> 41 file ("/logs/stdout.log" flags(no-parse));<br>
42 };<br>...<br>61 destination d_stdout { file("/var/log/$YEAR$MONTH$DAY/stdout"); };<br>...<br>80 log { source(s_stdout); destination(d_stdout); };<br><br></div>The
problem is that changes in /logs/stdout.log are only visible in
/var/log/20140717/stdout when I perform /etc/init.d/syslog-ng reload or
restart. I tried several settings of flush_*, log_fifo_size and
follow_freq but with no luck :D<br>
<br></div>Is it a problem withe the version that I use (quite old :D ) or is there a mistake in my configuration maybe?<br><br></div>BR,<br>Rafal.</div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br><br clear="all"><br>-- <br>Bazsi
</div>