On 04May2007 03:39PM (+0100), Geller, Sandor (IT) wrote:
Hi, if you suspect a facility/severity problem then using a fallback log at the end of the configuration might help you, like this:
log { source(s_all); destination(d_fallback); flags(fallback); };
Syslog-ng can cache log messages in memory so it might be the case that the logs gets written with a small delay. Without seeing your actual configuration it's hard to help you further.. Sendmail isn't modular so when an openlog was successful (and it was because you see messages from sendmail) then you're unlikely to hit any log socket connection number limits which sometimes happen - but this will get logged by syslog-ng if you use the internal() source.
Regards,
Sandor
Thanks. I'm not seeing anything in the fallback log at all. I'm also not seeing any errors or dropped messages in syslog-ng's log output. Attached is my syslog-ng.conf. Perhaps you may spy something there.