On Mon, 2009-03-09 at 02:36 +0100, gatfi sami wrote:
hi i am using syslog-ng 2.0.9.1 on open suse 11.0
i configured this littele script in /etc/syslog-ng/syslog-ng.conf
source my_src { file("/var/log/apache2/error_log"); };
#filter my_filter { };
destination my_dest{ file("/var/log/Sami/$HOST/messages" owner("root") group("root") perm(0640) dir_perm(0750) create_dirs(yes)); };
log { source(my_src); #filter(my_filter); destination(my_dest); }; the problem is when i restart apache2 while using the tail -f /var/log/Sami/$HOST/messages
nothing happens i have to restart syslog-ng to see those errors
by the way i stoped the apparmor to avoid a permission denied on the destination driver
Since you are using 2.0, you need to explicitly specify for syslog-ng that you want to poll the file for changes. You can do this via the follow-freq() option, e.g. file("/var/log/apache2/error_log" follow_freq(1)); In 3.0, the default value for follow_freq() for regular files is 1 seconds, so you wouldn't have to specify it explicitly. -- Bazsi