Hi, AFAIK, unfortunately there is currently no way to manipulate the queue. Regards, Robert On Monday, March 08, 2010 18:12 CET, "Eric Snow" <esnow@verio.net> wrote:
If disk based buffering allows me to yank the message at the front of the queue, so that it doesn't hold up the ones behind it, then yes that is what I want. The statistics and ability to look at the queue are good, but I need to be able to manipulate the queue.
OR
I need to be able to have some form of exception handling in my syslog-ng configuration. Something that will catch a failure in a log and allow me to handle that failure intelligently.
-eric
-----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Balazs Scheidler Sent: Saturday, March 06, 2010 2:09 AM To: Syslog-ng users' and developers' mailing list Subject: Re: [syslog-ng] queue management
On Fri, 2010-03-05 at 17:49 -0500, Eric Snow wrote:
Hi,
I am looking to manage my output buffers. I have one destination that sometimes has trouble and I want to be able to manage the messages that got buffered while I fix my flaky destination. Is there any tool I can use to manage those buffered messages? If not, isn’t there any exception handling that I can apply to a log such that errors or other failures for that log can be redirected to another destination? I want to avoid clogging up my output queue and especially to avoid losing any messages. Thanks!
you mean you have disk based buffering? in the upcoming 3.1 version (due to be released within 2 weeks), there's a tool called dqtool to dump the contents of the queue file, although I'm not sure that's what you meant. there are further disk buffer related improvements in the queue for 3.2, and also a way to send the messages to a failed destination to an alternate server.
also, syslog-ng is counting the number of messages in a given queue, using its statistics framework. it is the stored counter you can see for a given destination. this gets reported in the 'log statistics' message, or via the syslog-ng control socket (/opt/syslog-ng/var/syslog-ng.ctl).
-- Bazsi
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
This email message is intended for the use of the person to whom it has been sent, and may contain information that is confidential or legally protected. If you are not the intended recipient or have received this message in error, you are not authorized to copy, distribute, or otherwise use this message or its attachments. Please notify the sender immediately by return e-mail and permanently delete this message and any attachments. Verio, Inc. makes no warranty that this email is error or virus free. Thank you. ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html