Re: [syslog-ng]Message retension period

Balazs Scheidler wrote:

syslog-ng keeps those messages in a memory buffer, whose size is controlled using the log_fifo_size() global/per-destination parameter.

Thank you, this makes sense. As a follow-up question I'd like to ask what happens if the number of lines set by this parameter is exceeded. Are messages dropped or the oldest first overwritten? I assume this is recorded on the server that dropped the message with the STATS: dropped message? Jim Mozley