Ohrberg, Mick on Thu 5/10 13:20 -0500:
I keep thinking I'm doing something wrong... I have syslog-ng running on a SUN Ultra 10, and it's been running for 192 days, and I have 700 minutes time and 4.5M size... Of course, I only log from 6 other boxes to it for now. :)
Consider this a success story :) I have used syslog-ng to split up incoming logs per facility and priority, so that if I see a message in the crit file, I can go to the corresponding facility file and see if there were any more message. This functionality has come in very handy a few times. :)
Just for kicks, try HUPping it after you changed the config file to write everything to a file host/program/year.month.day I bet it starts eating your CPU and RAM until your computer explodes ;) But we'll see over the next few days...also it HUPs each night when the rotation occurs, so perhaps that does a lot of freeing and we'll get some stable behavior.