July 2003 - syslog-ng - lists.balabit.hu

RE: [syslog-ng]Syslog-ng Logging message three times?
by Hamilton, Andrew 18 Jul '03

18 Jul '03

What does your config look like? Especially the log lines. Are you logging three times to the same file? Please post your config so we can take a look at it. Regards, Drew -----Original Message----- From: markallen(a)micron.com [mailto:markallen@micron.com] Sent: Friday, July 18, 2003 9:32 AM To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng]Syslog-ng Logging message three times? I'm running syslog-ng version 1.6 and I notice that any message that is logged to syslog-ng is logged three times versus once. I can do logger command and log to it and three message pop into the file system. Is this normal? Is it a bug? How do I fix it? Thanks -Mark _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0

Syslog-ng Logging message three times?
by markallen＠micron.com 18 Jul '03

18 Jul '03

I'm running syslog-ng version 1.6 and I notice that any message that is logged to syslog-ng is logged three times versus once. I can do logger command and log to it and three message pop into the file system. Is this normal? Is it a bug? How do I fix it? Thanks -Mark

1 0

Config error
by TIM MOORE 18 Jul '03

18 Jul '03

I just loaded Syslog-ng 1.6.0rc3 on a SuSE 8.2 linux box. I have successfully been running version 1.6.0rc1 on another LFS box for months. I took my config from the box running 1.6.0rc1 and put it on the new box. I get an error on the options. Did something change in the format or something with the options? I didn't see anything in the documentation that said formating or options changed. The daemon does run, but kicks out this for error: syslog1:~ # /etc/init.d/syslog-ng start /etc/init.d/syslog-ng: /etc/syslog-ng/syslog-ng.conf: line 12: syntax error near unexpected token `(' /etc/init.d/syslog-ng: /etc/syslog-ng/syslog-ng.conf: line 12: `options { long_hostnames(off); use_fqdn(yes); use_dns(yes); dns_cache(yes); keep_hostname(yes); use_time_recvd(yes); sync(0); };' Starting Syslog-ng done Everything looks right to me and it works fine on another box running 1.6.0rc1. Can anyone see the problem? I must be missing something little. Thanks, --------------------------------------- Tim Moore DNS/Linux/Cisco Admin ODJFS

1 0

Syslog-ng in a windowed shell
by will＠villa442.freeserve.co.uk 14 Jul '03

14 Jul '03

Is it posssible to have syslog-ng to output log data to a windowed shell rather than a main terminal. I'm currently running Debian v3 with KDE, & can get it to output ok to fullscreen terminal screens e.g. tty8 and root, but not windowed in the KDE environment. If so what should the config line be for this. Thanks in Advance. Will __________________________________________________________________________ Join Freeserve http://www.freeserve.com/time/ Winner of the 2003 Internet Service Providers' Association awards for Best Unmetered ISP and Best Consumer Application.

2 1

Year off the first of the month
by Keith Olmstead 14 Jul '03

14 Jul '03

Hello, Something strange is happening. At the first of the month I have logs that create a dir for 2002, one year ago and log breafly for 2002. It seems to be happening at the first of the month and only last breafly. Does anyone know why this is happening? Thanks, Keith

4 3

Log TCP
by Darrell Boyd 12 Jul '03

12 Jul '03

1 0

RE: [syslog-ng]Dropped messages and UDP buffer sizes
by Clemson, Chris 11 Jul '03

11 Jul '03

> On Thu, Jul 10, 2003 at 09:39:18AM +0100, Clemson, Chris wrote: > > Hello! > > We are trying to use syslog-ng to log messages from several servers. > > We get quite a few "dropped" messages from syslog-ng saying > between 70 and > > 290 are being dropped each time. > > According to the list, it sounds like we need to increase > out UDP receive > > buffer size. > > If syslog-ng reports dropped messages in itself, increasing > UDP receive > buffer will not help, as syslog-ng itself has already pulled > the message. ah, i see. > Message drops within syslog-ng might happen because one or more of the > destinations process messages slower than the sources. If you > only have file > destinations then increasing log_fifo_size() might help. it seems, after a bit more fiddling around, that it is a problem when logging to mysql (i didn't realise we were still logging to it). when we stop logging to mysql, 0 lines are dropped. is there anything we can do to buffer logging to mysql? thanks, chris -- The content of this e-mail is confidential, may contain privileged material and is intended solely for the recipient(s) named above. If you receive this in error, please notify Software AG immediately and delete this e-mail. Software AG (UK) Limited Registered in England & Wales 1310740 Registered Office: Hudson House, Hudson Way, Pride Park, Derby DE24 8HS

2 1

RE: [syslog-ng]syslog-ng - AIX 5.x.x
by Gehring, Andrew x66132 10 Jul '03

10 Jul '03

I've successfully compiled it on 5.2 using gcc 3.3 Problems? Andrew _ This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system.

1 0

syslog-ng - AIX 5.x.x
by sey mor 10 Jul '03

10 Jul '03

Has anyone run across any problems on AIX 5.x.x? syslog-ng(a)lists.balabit.hu _________________________________________________________________ Tired of spam? Get advanced junk mail protection with MSN 8. http://join.msn.com/?page=features/junkmail

1 0

syslog-ng&logrotate
by yannick.haguenier＠tuxfamily.org 10 Jul '03

10 Jul '03

Hy, i have squid + syslog-ng 1.0.6.rc1 Syslog-ng look squid/access.log, and write log file (with date format) on a remote server (tcp). On squid there is a logrotate at 6 am. My pb : before the log rotate, all is good. After logrotate, syslog-ng don't write in the remote file. The last line appear in this file was create at 6am. The process run on the both server, and i have no error. If i run syslog-ng restart, syslog-ng write the ligne in remote file . the next error appear after the next logrotate. Does anyone know why this is happening? thanks

1 0