<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Did some experimenting:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span>Well. Starting logrotate by hand revealed, that it errors out:<br>
</span>
<div><br>
</div>
<div>[root@localhost ~]# /usr/sbin/logrotate /etc/logrotate.conf<br>
</div>
<div>error: syslog-ng:1 duplicate log entry for /var/log/cron<br>
</div>
<div>error: syslog-ng:1 duplicate log entry for /var/log/maillog<br>
</div>
<div>error: syslog-ng:1 duplicate log entry for /var/log/messages<br>
</div>
<div>error: syslog-ng:1 duplicate log entry for /var/log/secure<br>
</div>
<div>error: syslog-ng:1 duplicate log entry for /var/log/spooler<br>
</div>
<div>error: found error in file syslog-ng, skipping<br>
</div>
<div><br>
</div>
<div>So, one problem is resolved, as there is no more file conflict with rsyslog. But we have another one.<br>
</div>
<div><br>
</div>
<div>- if we keep the file level conflict, then everything works properly, but rsyslog and syslog-ng can't be installed in parallel<br>
</div>
<div>- if there is no file level conflict then they can be installed in parallel, but reloading syslog-ng from logrotate does not work<br>
</div>
<div><br>
</div>
<span>What do you think?</span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Bye,<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<div>
<div>
<div dir="ltr">Peter Czanik (CzP) <peter.czanik@oneidentity.com><br>
Balabit (a OneIdentity company) / syslog-ng upstream<br>
<a href="https://syslog-ng.com/community/" target="_blank">https://syslog-ng.com/<wbr>community/</a><br>
<a href="https://twitter.com/PCzanik" target="_blank">https://twitter.com/PCzanik</a></div>
</div>
</div>
<br>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Peter Czanik (pczanik) <Peter.Czanik@oneidentity.com><br>
<b>Sent:</b> Tuesday, February 18, 2020 14:15<br>
<b>To:</b> syslog-ng@lists.balabit.hu <syslog-ng@lists.balabit.hu><br>
<b>Subject:</b> [syslog-ng] fedora/rhel & logrotate</font>
<div> </div>
</div>
<style type="text/css" style="display:none">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div style="background-color:#FFEB9C; width:100%; border-style:solid; border-color:#9C6500; border-width:1pt; padding:2pt; font-size:10pt; line-height:12pt; font-family:'Calibri'; color:Black; text-align:left">
<span style="color:#9C6500; font-weight:bold">CAUTION:</span> This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.</div>
<br>
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Hi,</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Recently I received a bug report about logrotate and RHEL 8: <a href="https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbugzilla.redhat.com%2Fshow_bug.cgi%3Fid%3D1802165&data=02%7C01%7CPeter.Czanik%40oneidentity.com%7C3ea468d976204da2730208d7b474aa32%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637176285482793330&sdata=nzbhb0Eke8Vn9j7zOP0aMAtbgX3B1CobMFY1L3mQPsY%3D&reserved=0" originalsrc="https://bugzilla.redhat.com/show_bug.cgi?id=1802165" shash="z+L3IMop5Uyo+e3PeRn4y2B1NhNm+wjqpQ9N9mXwehgeaRUOE1U5rA1tplvSDAOC6U/M1iRDe0PmcklonTI7Z+Ob8av+uUIpIZ8s70ZgQahttXG7QA8ukvWJF76P70gOAW2HMr4BTtWNWK3A/N3RVa0JseATs3OMl2hLDLJ/+Y8=">
https://bugzilla.redhat.com/show_bug.cgi?id=1802165</a> In RHEL 8 /etc/logroate.d/syslog is now rsyslog specific and thus conflicts with the same file coming from syslog-ng. I changed my test repo
<a href="https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcopr.fedorainfracloud.org%2Fcoprs%2Fczanik%2Fsyslog-ng-githead%2F&data=02%7C01%7CPeter.Czanik%40oneidentity.com%7C3ea468d976204da2730208d7b474aa32%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637176285482803331&sdata=DQEEadIsOzsGAGGLCWmdQtUft3qsfqBSJvkf%2Bwic%2FwU%3D&reserved=0" originalsrc="https://copr.fedorainfracloud.org/coprs/czanik/syslog-ng-githead/" shash="kRicE52f6pkt8qDvAIM1YFQ0htE3ts5C9zVYFtMclNyPRIGiSPkuGo70T7T3cj4PtN68uBhBuu1mAAHJwqCP18bdZ95nbVRHXO4xUyxWB2zGtQTWcTp77GY2i2vfH0SVy2PinsPr0LW2Xbj9/BUvh4u13bMAQmhAN46FL7AKSo0=">
https://copr.fedorainfracloud.org/coprs/czanik/syslog-ng-githead/</a> in a way that RHEL 7 keeps using /etc/logroate/syslog, but all the Fedora and RHEL 8 packages change the logroate file name to /etc/logroate/syslog-ng.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Of course this means, that there is no conflict with rsyslog and there are two logrotate scripts for the same set of logs.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
I am trying to test it on my own as well on RHEL 8, but any additional testing and feedback are very welcome!</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Thanks,<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div id="x_Signature">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<div>
<div>
<div dir="ltr">Peter Czanik (CzP) <peter.czanik@oneidentity.com><br>
Balabit (a OneIdentity company) / syslog-ng upstream<br>
<a href="https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsyslog-ng.com%2Fcommunity%2F&data=02%7C01%7CPeter.Czanik%40oneidentity.com%7C3ea468d976204da2730208d7b474aa32%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637176285482803331&sdata=vshkcpFWTYDlfJacYRiCroVIgDeGiynw5E6F5I%2BlXd4%3D&reserved=0" originalsrc="https://syslog-ng.com/community/" shash="Pv2uwbRCAd6XZN/a9jnRdINAv6iWFNUV1wU1t3lQpZkbfxmiOWLyKtzyGNV+sbIoPRhaL0e7UMvZMSb6dbQaNjVsrlybs8guX86sX+55JKKTI0m6nVBJ8bdx8lf+0uu/5UtxnwO/tfpDtoB8qQYOiNNQNdkQP2ziMb8egrNBGik=" target="_blank">https://syslog-ng.com/<wbr>community/</a><br>
<a href="https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FPCzanik&data=02%7C01%7CPeter.Czanik%40oneidentity.com%7C3ea468d976204da2730208d7b474aa32%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637176285482813325&sdata=4UJPj1gdzKyT%2FwulMxYgYVS6TtFncSFQb9oNHEanLv0%3D&reserved=0" originalsrc="https://twitter.com/PCzanik" shash="qk5p/8BhwYm1N4bbmGapA6aovRdm68eGaCClEU6tBsQI9fhsAUiebvGzMR/f4wW6WbdqmOlhM9lQJ9GN/tpYJFAHfcs3VGuHpM9aR9e28Jr4PNGyE3JuepQ4U+tOF8Oj01/rsZu+a0+cmMEYHdwueo1Iug/kTSFzbug3fAoIn8w=" target="_blank">https://twitter.com/PCzanik</a></div>
</div>
</div>
<br>
</div>
</div>
</div>
</div>
</body>
</html>