28 Feb
2005
28 Feb
'05
8:53 a.m.
On Mon, 2005-02-28 at 01:14 -0500, Jay Guerette wrote:
They're dropped, lost, unrecoverable. There really is nothing else syslog-ng could do in those situations.
If your data is that important (and who logs un-important stuff, anyway?) you should write it to a log file, and the parse it from there; that way, if your parser dies, you don't lose any data.
This is not necessarily true for syslog-ng 1.9.x where you can specify flags(flow-control) for log statements which means to stop writing instead of dropping messages. -- Bazsi