On Sun, 2003-09-21 at 03:50, Balazs Scheidler wrote:
I only have 3 sources: internal and 2 udp sources (no /proc/kmsg or /dev/log). It runs fine for a short while and then dies with the above error. Sometimes it runs for a minute or so and sometimes for 15-20 mins without a problem before it dies (logging properly from the various servers while it runs).
So you have three sources and a single file destination? Or you also log to remote hosts uding TCP or UDP?
No, I have 2 destinations....other servers are sending logs here. source s_local { internal(); }; source s_int1_udp { udp(ip("10.0.1.123") port(514)); }; source s_int2_udp { udp(ip("192.168.1.123") port(514)); }; destination d_sort_program_host { file("/export/syslog-ng/var/log/$HOST/$PROGRAM.$MONTH$DAY$YEAR" group("logs") perm(0640) create_dirs(yes) dir_perm(0750) ); }; destination d_sort_host { file("/export/syslog-ng/var/log/$HOST/$MONTH$DAY$YEAR" group("logs") perm(0640) create_dirs(yes) dir_perm(0750) ); }; log { source(s_local); source(s_int1_udp); destination(d_sort_program_host); }; log { source(s_int2_udp); destination(d_sort_host); }; -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com