hello, I have the same problem, when the sending machine has a different locale setting, than the receiving machine. For example: my syslog server has a english locale and the sending machine has a german locale. In german the 3 letter short cut for "march" is "Mär" (from german März) but the english short cut is "Mar". When these strings are different the date based sorting of syslog messages doesn't work correctly. In my case the messages are sorted at 2004-12-31, so the last day of the last year. Check if you have also a directory <path>/2004/12 Jörg On Wed, 2 Mar 2005 15:49:02 -0500 "Deras, Angel R./Information Systems" <derasa@MSKCC.ORG> wrote:
Hi Friends,
For some reason, syslog-ng did not create a new dir and destination file after it closed the last log on February 28 @ 23:59. It should have created a new dir in the form:
<path>/2005/03/
and a file named "2005-03-01".
However, this did not happen and I am still not able to get logging going.
I am using syslog-ng version 1.6.6, running on FreeBSD 5.3. I installed it recently and it worked great from Feb 17 to Feb 28, each day creating that day's file; but it not create the March directory nor any other file.
tcpdump sessions show that the udp packets to port 514 are arriving at the log server.
Any help will be greatly appreciated.
thanks,
ard
=====================================================================
Please note that this e-mail and any files transmitted with it may be privileged, confidential, and protected from disclosure under applicable law. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any reading, dissemination, distribution, copying, or other use of this communication or any of its attachments is strictly prohibited. If you have received this communication in error, please notify the sender immediately by replying to this message and deleting this message, any attachments, and all copies and backups from your computer.
-- Joerg Michels teamnet GmbH Voice +49 5251 879293 30 Technologiepark 20 Fax +49 5251 879293 99 D-33100 Paderborn EMail michels@teamnet.de