<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:$B%a%$%j%*(B
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><div>Thank you for your advice.</div><div>I tried you options.</div><div>But the problem is same.</div><div><br></div>I use options below.<div><br></div><div><div>options {</div><div> chain_hostnames(off);</div><div> flush_lines(3);</div><div> flush_timeout(5);</div><div> use_dns(no);</div><div> use_fqdn(no);</div><div> owner("root");</div><div> group("adm");</div><div> perm(0640);</div><div> stats_freq(600);</div><div> bad_hostname("^gconfd$");</div><div>};</div><div><br></div><div>I try to catch log by tail command.</div><div>like this "<span style="font-size: 12pt;">$sudo tail -f /var/log/messages"</span></div><div><br></div><div>I expected to 3 line show at a time.</div><div><span style="font-size: 12pt;">But log shows one by one, when I call logger command.</span></div><div><span style="font-size: 12pt;"><br></span></div><div><span style="font-size: 12pt;">Could you confirm that the log shows at once? Or one by one?</span></div><div><span style="font-size: 12pt;"><br></span></div><div>thanks!</div><div><br></div><div><br></div><div><hr id="stopSpelling">To: syslog-ng@lists.balabit.hu<br>From: erempel@uvic.ca<br>Date: Wed, 14 Oct 2015 20:01:54 -0700<br>Subject: Re: [syslog-ng] Is the option flush_lines valid now?<br><br>
<div class="ecxmoz-cite-prefix">What happens when you try to use the
option.<br>
<br>
I use it with syslog-ng 3.7.1<br>
<br>
options {<br>
log_fifo_size(20000000);<br>
use_fqdn(yes);<br>
keep_hostname(yes);<br>
chain_hostnames(yes);<br>
time_reap(60);<br>
time_reopen(5);<br>
flush_lines(15000);<br>
flush_timeout(2000);<br>
stats_level(1);<br>
log_msg_size(16384);<br>
};<br>
<br>
<br>
without any problems.<br>
<br>
<br>
On 10/14/2015 04:35 PM, $B0KF#(B $B9(J?(B wrote:<br>
</div>
<blockquote cite="mid:BAY168-W59BFEB57F78EBF241CEA9CCA3F0@phx.gbl">
<style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:$B%a%$%j%*(B;
}
--></style>
<div dir="ltr">I tried to use syslog-ng.
<div><br>
</div>
<div>At first I used a syslog-ng 3.5.3 on <span style="color:rgb(34, 34, 34);font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:15px;line-height:19.5px;background-color:rgb(255, 255, 255);">ubuntu14.04.</span></div>
<div>But I can not use flush_line option.</div>
<div><br>
</div>
<div><span style="font-size:12pt;">I asked question in stack
overflow.</span></div>
<div>Mr.argus said that " There is a lack of condition"</div>
<div><a href="http://ja.stackoverflow.com/questions/12836/syslog-ng-%E3%81%AE-flush-lines-%E3%82%AA%E3%83%97%E3%82%B7%E3%83%A7%E3%83%B3%E3%81%8C%E5%8A%B9%E3%81%8B%E3%81%AA%E3%81%84" target="_blank">linux
- syslog-ng $B$N(B flush_lines$B!!%*%W%7%g%s$,8z$+$J$$(B - $B%9%?%C%/!&%*!<%P!<%U%m!<(B</a></div>
<div><br>
</div>
<div>Specifically function "<span style="font-family:Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, sans-serif;white-space:inherit;font-size:13px;background-color:rgb(238, 238, 238);">log_writer_flush"</span><span style="font-size:12pt;"> should be like that.</span></div>
<div><span style="font-size:12pt;"><br>
</span></div>
<div><span style="font-size:12pt;">Before:</span></div>
<div><span style="font-size:12pt;"><br>
</span></div>
<div>
<pre class="ecxlang-c ecxprettyprint ecxprettyprinted" style="padding:5px;border:0px;font-size:13px;overflow:auto;width:auto;max-height:600px;font-family:Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, sans-serif;color:rgb(57, 51, 24);word-wrap:normal;background-color:rgb(238, 238, 238);"><code style="padding:0px;border:0px;font-family:Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, sans-serif;white-space:inherit;"><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">gboolean
log_writer_flush</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">(</span><span class="ecxtyp" style="padding:0px;border:0px;color:rgb(43, 145, 175);">LogWriter</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">*</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">self</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">,</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxtyp" style="padding:0px;border:0px;color:rgb(43, 145, 175);">LogWriterFlushMode</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> flush_mode</span><span class="ecxpun" style="padding:0px;">)</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">
</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">{</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">
</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">:</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">
</span><span class="ecxkwd" style="padding:0px;border:0px;color:rgb(0, 0, 139);">if</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">(</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">flush_mode </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">>=</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> LW_FLUSH_BUFFER </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">||</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> count </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">==</span><span class="ecxpln" style="padding:0px;border:0px;"> </span><span class="ecxlit" style="padding:0px;border:0px;color:rgb(128, 0, 0);">0</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">)</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">
</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">{</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">
</span><span class="ecxkwd" style="padding:0px;border:0px;color:rgb(0, 0, 139);">if</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">(</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">log_proto_client_flush</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">(</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">proto</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">)</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">==</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> LPS_ER!
ROR</span>
<span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">)</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">
</span><span class="ecxkwd" style="padding:0px;border:0px;color:rgb(0, 0, 139);">return</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> FALSE</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">;</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">
</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">}</span></code></pre>
</div>
<div>After:</div>
<div><br>
</div>
<div>
<pre class="ecxlang-c ecxprettyprint ecxprettyprinted" style="padding:5px;border:0px;font-size:13px;overflow:auto;width:auto;max-height:600px;font-family:Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, sans-serif;color:rgb(57, 51, 24);word-wrap:normal;background-color:rgb(238, 238, 238);"><code style="padding:0px;border:0px;font-family:Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, sans-serif;white-space:inherit;"><span class="ecxtyp" style="padding:0px;border:0px;color:rgb(43, 145, 175);">LogProtoFileWriter</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">*</span><span class="ecxpln" style="border:0px;color:rgb(0, 0, 0);">w </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">=</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">(</span><span class="ecxtyp" style="padding:0px;border:0px;color:rgb(43, 145, 175);">LogProtoFileWriter</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">*)</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">proto</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">;</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">
</span><span class="ecxkwd" style="padding:0px;border:0px;color:rgb(0, 0, 139);">if</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">(</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">(</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">w</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">-></span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">buf_count </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">>=</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> w</span><span>-></span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">buf_size</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">)</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">&&</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">(</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">flush_mode </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">>=</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> LW_FLUSH_BUFFER </span><span>||</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> count </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">==</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxlit" style="padding:0px;border:0px;color:rgb(128, 0, 0);">0</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">)</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">)</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">
</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">{</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">
</span><span class="ecxkwd" style="padding:0px;border:0px;color:rgb(0, 0, 139);">if</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">(</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">log_proto_client_flush</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">(</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">proto</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">)</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">==</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> LPS_ER!
ROR</span>
<span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">)</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">
</span><span class="ecxkwd" style="padding:0px;border:0px;color:rgb(0, 0, 139);">return</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);"> FALSE</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">;</span><span class="ecxpln" style="padding:0px;border:0px;color:rgb(0, 0, 0);">
</span><span class="ecxpun" style="padding:0px;border:0px;color:rgb(0, 0, 0);">}</span></code></pre>
</div>
<div><span style="font-size:12pt;"><br>
</span></div>
<div><span style="font-size:12pt;">And now I use a latest
syslog-ng ose 3.7.1, hoping the bug has been fixed.</span></div>
<div><span style="font-size:12pt;">But I can not use flush_line
option either.</span></div>
<div><span style="font-size:12pt;"><br>
</span></div>
<div><span style="font-size:12pt;">Is the option flush_lines
valid now?</span></div>
<div>
<pre class="ecxlang-c ecxprettyprint ecxprettyprinted" style="padding:5px;border:0px;font-size:13px;overflow:auto;width:auto;max-height:600px;font-family:Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, sans-serif;color:rgb(57, 51, 24);word-wrap:normal;background-color:rgb(238, 238, 238);"></pre>
</div>
<div id="ecxiknow-qtip-0" class="ecxiknow-qtip ecxiknow-qtip-default ecxiknow-qtip-light ecxiknow-qtip-shadow ecxiknow-qtip-rounded ecxiknow-qtip-fixed ecxiknow-qtip-pos-tl" role="alert" aria-live="polite" aria-atomic="false" aria-describedby="iknow-qtip-0-content" aria-hidden="true" data-qtip-id="0" style="">
<div class="ecxiknow-qtip-tip" style="display:none;"><canvas></canvas></div>
<div class="ecxiknow-qtip-content" id="ecxiknow-qtip-0-content" aria-atomic="true">
<section class="ecxdictionary-tooltip-inner">
<div class="ecxentries-list">
<article class="ecxentry">
<div class="ecxentry-column audio" data-lemma="try"> <span class="ecxplay-sound"></span> </div>
<div class="ecxentry-column ecxdefinition"> <span class="ecxlemma"> try </span> <span class="ecxpart-of-speech" data-type="verb"> ($BF0(B) </span>
<span class="ecxdefinition-text">
$B;n$_$k!"EX$a$k!"EXNO$9$k!";n$9!"D)$`!"8+$k!"?3M}$9$k(B </span> <br>
</div>
<div class="ecxentry-column ecxfeedback"> <span class="ecxflag-entry" data-form="try" data-lemma="try" data-translation="$B;n$_$k!"EX$a$k!"EXNO$9$k!";n$9!"D)$`!"8+$k!"?3M}$9$k(B" data-part-of-speech="verb"></span> </div>
</article>
<article class="ecxentry">
<div class="ecxentry-column audio" data-lemma="tried"> <span class="ecxplay-sound"></span> </div>
<div class="ecxentry-column ecxdefinition"> <span class="ecxlemma"> tried </span> <span class="ecxpart-of-speech" data-type="adjective"> ($B7A(B)
</span> <span class="ecxdefinition-text">
$B8!:::Q$_$N!">ZL@:Q$_$N!";n83:Q$_$N(B </span> <br>
</div>
<div class="ecxentry-column ecxfeedback"> <span class="ecxflag-entry" data-form="tried" data-lemma="tried" data-translation="$B8!:::Q$_$N!">ZL@:Q$_$N!";n83:Q$_$N(B" data-part-of-speech="adjective"></span> </div>
</article>
</div>
</section>
<section class="ecxiknow-branding"> <a href="http://iknow.jp" target="_blank"> Powered by <span class="ecxbrand">iKnow!</span> </a>
</section>
</div>
</div>
</div>
<br>
<fieldset class="ecxmimeAttachmentHeader"></fieldset>
<br>
<pre>This body part will be downloaded on demand.</pre>
</blockquote>
<br>
<br>______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq</div></div><div id="iknow-qtip-0" class="iknow-qtip iknow-qtip-default iknow-qtip-light iknow-qtip-shadow iknow-qtip-rounded iknow-qtip-fixed iknow-qtip-pos-tc iknow-qtip-focus" tracking="false" role="alert" aria-live="polite" aria-atomic="false" aria-describedby="iknow-qtip-0-content" aria-hidden="false" data-qtip-id="0" style="z-index: 2147483001; left: 38px; top: 24px; display: block;"><div class="iknow-qtip-tip" style="display: none;"><canvas></canvas></div><div class="iknow-qtip-content" id="iknow-qtip-0-content" aria-atomic="true"><section class="dictionary-tooltip-inner">
<div class="entries-list">
<article class="entry">
<div class="entry-column audio" data-lemma="advice">
<span class="play-sound"></span>
</div>
<div class="entry-column definition">
<span class="lemma">
advice
</span>
<span class="part-of-speech" data-type="noun">
($BL>(B)
</span>
<span class="definition-text">
$B=u8@!"%"%I%P%$%9!"4+$a(B
</span>
<BR>
</div>
<div class="entry-column feedback">
<span class="flag-entry" data-form="advice" data-lemma="advice" data-translation="$B=u8@!"%"%I%P%$%9!"4+$a(B" data-part-of-speech="noun"></span>
</div>
</article>
</div>
</section>
<section class="iknow-branding">
<a href="http://iknow.jp" target="_blank">
Powered by <span class="brand">iKnow!</span>
</a>
</section>
</div></div> </div></body>
</html>