- syslog-ng - lists.balabit.hu

Synchronize logs after network outrage
by news gonzo news gonzo 14 Apr '06

14 Apr '06

hello, I'll have a question :) I would like to know if main server for syslog-ng is unreachable, when the connection redone, Are the 2 syslog will be synchronized ? and is there a specific message which describe the 2 events (deconnection and re-connection) ? Thx a lot --------------------------------- Faites de Yahoo! votre page d'accueil sur le web pour retrouver directement vos services préférés : vérifiez vos nouveaux mails, lancez vos recherches et suivez l'actualité en temps réel. Cliquez ici.

1 0

Antw: [syslog-ng] zero-loss from source{pipe()} (Abwesenheitsnotiz)
by Stephan Hendl 13 Apr '06

13 Apr '06

Sehr geehrte Damen und Herren, ich bin vom 12.-21.04.2006 nicht im Hause. In dringenden Fällen wenden Sie sich bitte an Herrn Göring (Tel. -545). Viele Grüße Stephan Hendl

3 2

Antw: [syslog-ng] Problems compiling syslog-ng on RH9 with spoof source (Abwesenheitsnotiz)
by Stephan Hendl 13 Apr '06

13 Apr '06

Sehr geehrte Damen und Herren, ich bin vom 12.-21.04.2006 nicht im Hause. In dringenden Fällen wenden Sie sich bitte an Herrn Göring (Tel. -545). Viele Grüße Stephan Hendl

1 0

Antw: Re: [syslog-ng] zero-loss from source{pipe()} (Abwesenheitsnotiz)
by Stephan Hendl 12 Apr '06

12 Apr '06

Sehr geehrte Damen und Herren, ich bin vom 12.-21.04.2006 nicht im Hause. In dringenden Fällen wenden Sie sich bitte an Herrn Göring (Tel. -545). Viele Grüße Stephan Hendl

1 0

Antw: Re: [syslog-ng] log_fifo_size and locked tables (Abwesenheitsnotiz)
by Stephan Hendl 12 Apr '06

12 Apr '06

Sehr geehrte Damen und Herren, ich bin vom 12.-21.04.2006 nicht im Hause. In dringenden Fällen wenden Sie sich bitte an Herrn Göring (Tel. -545). Viele Grüße Stephan Hendl

1 0

Antw: RE: Antw: [syslog-ng] zero-loss fromsource{pipe()} (Abwesenheitsnotiz) (Abwesenheitsnotiz)
by Stephan Hendl 12 Apr '06

12 Apr '06

Sehr geehrte Damen und Herren, ich bin vom 12.-21.04.2006 nicht im Hause. In dringenden Fällen wenden Sie sich bitte an Herrn Göring (Tel. -545). Viele Grüße Stephan Hendl

1 0

RE: Antw: [syslog-ng] zero-loss fromsource{pipe()} (Abwesenheitsnotiz)
by Heigl Florian - Munich-MR - external 12 Apr '06

12 Apr '06

I only found a phone number for their human ressources department, and I'm not that nasty to get in reach of mr. goering via that route. :) > -----Original Message----- > From: syslog-ng-bounces(a)lists.balabit.hu > [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Rob Munsch > Sent: Wednesday, April 12, 2006 6:06 PM > To: Stephan.Hendl(a)lds.brandenburg.de; Syslog-ng users' and > developers' mailing list > Subject: Re: Antw: [syslog-ng] zero-loss fromsource{pipe()} > (Abwesenheitsnotiz) > > Okay, we get it, Herr Hendl isn't in. Can we do something not to get > these bounces until, by the looks of it, the 21st?? XD > > Stephan Hendl wrote: > > >Sehr geehrte Damen und Herren, > > > >ich bin vom 12.-21.04.2006 nicht im Hause. In dringenden > Fällen wenden Sie sich bitte an Herrn Göring (Tel. -545). > > > >Viele Grüße > >Stephan Hendl > >_______________________________________________ > >syslog-ng maillist - syslog-ng(a)lists.balabit.hu > >https://lists.balabit.hu/mailman/listinfo/syslog-ng > >Frequently asked questions at > http://www.campin.net/syslog-ng/faq.html > > > > > > > > > -- > Rob Munsch > Solutions For Progress IT > > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/syslog-ng > Frequently asked questions at http://www.campin.net/syslog-ng/faq.html > >

1 0

Antw: Re: Antw: [syslog-ng] zero-loss fromsource{pipe()} (Abwesenheitsnotiz) (Abwesenheitsnotiz)
by Stephan Hendl 12 Apr '06

12 Apr '06

Sehr geehrte Damen und Herren, ich bin vom 12.-21.04.2006 nicht im Hause. In dringenden Fällen wenden Sie sich bitte an Herrn Göring (Tel. -545). Viele Grüße Stephan Hendl

1 0

Antw: RE: [syslog-ng] Apache 2 + logger + syslog-ng (Abwesenheitsnotiz)
by Stephan Hendl 12 Apr '06

12 Apr '06

Sehr geehrte Damen und Herren, ich bin vom 12.-21.04.2006 nicht im Hause. In dringenden Fällen wenden Sie sich bitte an Herrn Göring (Tel. -545). Viele Grüße Stephan Hendl

1 0

RE: [syslog-ng] Apache 2 + logger + syslog-ng
by Doyon, Jean-Francois 12 Apr '06

12 Apr '06

Wow, thanks a bunch, that was very helpful! For the list archives: "logger" truncates messages to 400 bytes! The C source is very simple though, so I just modified some numbers to allow for messages of up to 2048 bytes, to match syslog-ng's default. Works like a charm now. Thanks again, J.F. -----Original Message----- From: syslog-ng-bounces(a)lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Balazs Scheidler Sent: April 12, 2006 4:44 AM To: Syslog-ng users' and developers' mailing list Subject: RE: [syslog-ng] Apache 2 + logger + syslog-ng On Tue, 2006-04-11 at 09:50 -0400, Doyon, Jean-Francois wrote: > Sorry, > > Here's the system information: > > syslog-ng 1.6.9 built from source (on both ends) CentOS/RHEL 4.3 (on > both ends) Apache 2.2 built from source as well /usr/bin/logger from > package util-linux-2.12a-16.EL4.12 I've just tried to send a 5000 byte message to syslog-ng and it correctly wrote MSGONLY to the file. Tried the same using logger and it did not work: write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431 readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument) time([1144831342]) = 1144831342 write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431 readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument) time([1144831342]) = 1144831342 write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431 readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument) time([1144831342]) = 1144831342 write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431 read(0, "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"..., 4096) = 905 readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument) time([1144831342]) = 1144831342 write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431 strace shows that logger writes 431 bytes to syslog-ng, so the problem is in logger. -- Bazsi _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0