- syslog-ng - lists.balabit.hu

Re: syslog-ng -- confirmation of subscription -- request 502636
by Stefan Monnier 27 Apr '99

27 Apr '99

confirm 502636

1 0

Re: [syslog-ng] syslog-ng 1.1.7 released
by Stefan Monnier 27 Apr '99

27 Apr '99

Richi Plana said: > One problem Un*x systems administrator haven't totally agreed on is > how to rotate the logs if there was no way to reset the daemon which > had opened the log (and kept it open). The problem has to do with I have never had such a problem and any such program should just be fixed (or not be used). > filehandles. Some programs open a log and keep it open instead of > closing and reopening them when the need arises. Some admins say log > rotators should just cp the log to a backup and do the equivalent of a > 'cat /dev/null > logfile'. (which may cause some problems in some > situations). You'll end up creating big sparse files, which is OK except that `cp' will most likely not keep the sparseness so the backups will be big mostly empty (but not sparse) files. > Personally, I believe there to be three solutions to log rotation: 1) > If the program doesn't support log rotation, kill the daemon, rotate > the logs and restart the program; 2) if the program only supports > SIGHUP to re-read the configs and close and reopen the logs, just cp > the file and SIGHUP it; and, 3) (the best solution) if the program > supports a way to close, mv and reopen a new log file, then all your > problems are solved. If you don't like the name the program used for > the backup, just mv it. Solution 2 is bogus because it suffers from a race condition. You really don't want to use `cp' but `mv' there: mv log log.bak touch log; chmod 640 log kill -HUP <daemon> Solution 3 is only acceptable if the destination of the `mv' is known so that you can easily do postprocessing of this backed up log file. I'm thoroughly against any logrotation support in any program, except for the usual reopen-upon-sighup. The few programs that support it never support a wide enough range of alternatives. Log rotation is better served by separate tools. Of course, as long as you can turn off the logrotation (and use the conventional mv+sighup method), it's only a question of wasted resources (human resources for coding, mostly) and an additional source of bugs. Stefan

2 1

central log host
by Valur Guðmundsson 26 Apr '99

26 Apr '99

Is it posible to set up a central log host that takes log messages from many machines through the same port and then sorts the messages depending on name of the host that sent it.

2 1

Where are some docs?
by Marcin Okraszewski 25 Apr '99

25 Apr '99

Can anyone tell me, where can I find documents that describe config file. There wasn't any doc directory in the archive (1.1.8), and in README was written that there should be. -- -------------------------------------------------------------------- Marcin Okraszewski mailto:okrasz@vlo.ids.gda.pl http://www.vlo.ids.gda.pl/~okrasz/ --------------------------------------------------------------------

3 2

syslog-ng 1.1.8 and libol 0.1.6
by Balazs Scheidler 20 Apr '99

20 Apr '99

Hi, I have released syslog-ng 1.1.8 and the corresponding libol version 0.1.6. This version adds support for udp, tcp and unix destinations. (1.1.7 only supported them as sources) Error recovery is not there yet, so if a given destination is not running, it will cause problems for syslog-ng. libol 0.1.6 fixes a few bugs, and I added a libol-config script (similar to gtk-config in gtk) I hope this eliminates build problems some of you encountered on Solaris. -- Bazsi PGP key: http://www.balabit.hu/pgpkey.txt, or finger bazsi(a)balabit.hu

1 0

spam
by spy 19 Apr '99

19 Apr '99

------Transcript of session follows ------- syslog-ng(a)vekoll.saturnus.vein.hu 550 <spy(a)twilight.webbernet.net>... No spam please Subject: remote logging Date: Sat, 17 Apr 1999 08:43:33 +0200 From: s <spy(a)twilight.webbernet.net> To: syslog-ng(a)vekoll.saturnus.vein.hu References: 1 ello, what do you think about a new option in syslog-ng? I though "remote logging" could be very usefull. If someone hacks one system the first thing he will do is to clean the logs. Its very easy to clean the logs because they are in plain ascii format. If you could improve syslog-ng so that it can log remotly, intruders cannot clean the logs and its very easy to exemine the logs and trace him. What do u think about this improvement? spy(a)exploits.to Ì got these mail back, cuz of spam. Please configure your mailing-list better regards, spy

2 1

Re: [syslog-ng] main.c.x missing?
by Scott Dellinger 16 Apr '99

16 Apr '99

On Fri, 16 Apr 1999, Tommi Virtanen wrote: > > > After you install scsh, run make -C src main.c.x > > > - creating that is missing from the Makefiles. > > Umm... reread my last sentence. I can't compile scsh -- there are a > > number of compiler errors. The only RPM I can find is old and doesn't work > > right on my system. Could you just send the main.c.x file? It shouldn't > > be more than a few lines long; I think it only has one class definition in > > it. > Ouch. Misparsed "but it" as "but it [syslog-ng] still.." I figured that's what you had thought. > Here you go. [code snipped] *Much* better. :) Thanks; now it compiles happily. -- Scott Dellinger Systems Administrator, JMU Technical Services dellinsd(a)jmu.edu

1 0

main.c.x missing?
by Scott Dellinger 16 Apr '99

16 Apr '99

I am having problems compiling syslog-ng 1.1.7. Should main.c.x have been included in the distribution? Without it, 'make' tries to call 'make_class', which doesn't work since I don't have scsh. I actually tried installing scsh, but it doesn't compile cleanly on my RedHat 5.2 system. -- Scott Dellinger Systems Administrator, JMU Technical Services dellinsd(a)jmu.edu

2 2

syslog-ng 1.1.7 released
by Balazs Scheidler 15 Apr '99

15 Apr '99

Hi, I have released version 1.1.7 and libol 0.1.4. I added support for udp and tcp sources, and added a program filter, which filters messages based on program name. In addition it is now possible to restart syslog-ng by sending it a HUP signal. Except for sending messages over the network, all syslogd functionality is in place. I am thinking about builtin support for logfile rotation. One could specify rotation parameters in destination statements: destination d_messages { file /var/log/messages rotate(weekly, 9) compress }; What do you think? -- Bazsi PGP key: http://www.balabit.hu/pgpkey.txt, or finger bazsi(a)balabit.hu

4 5

Mailman upgrade
by Balazs Scheidler 12 Apr '99

12 Apr '99

Hi, Due to several bugs in our listprocessor mailman 1.0b6, I upgraded to mailman 1.0b11, which seems much more stable. Sadly enough mailman has binary config files, and for several reasons I couldn't simply copy the old configuration to the new one, thus I resubscribed everyone by hand. So you do not need to subscribe again, but any personal settings & passwords have been lost. If you want to modify your settings, simply go to the list preferences page at: http://vekoll.vein.hu/mailman/listinfo Choose the "Email my password" button, and as you have your password, set your preferences as you like it. If you have any problems, please send me them at: bazsi(a)balabit.hu -- Bazsi PGP key: http://www.balabit.hu/pgpkey.txt, or finger bazsi(a)balabit.hu

1 0