13 May
2004
13 May
'04
8:35 a.m.
Looks like version 1.6.3 is not working well on Solaris 8. Few minutes after the start it generates hundreds of messages like: syslog.err syslog-ng[27013]: do_stream_read: STREAMS device gave too long line I think it is the result of changes related to HP-UX and pad_size (from 10k to 256 bytes ?) Another problem with syslog-ng in general (1.6.1 or later) - we're started to lose about 10% of syslog messages. The config file is not too big and messages do arrive on server for sure (confirmed with snoop) but every few minutes syslog-ng is losing some of them. Any recommendation on tuning or troubleshooting? Dmitri