On Thu, 2007-06-28 at 12:42 +0200, Pol Moal wrote:
Hi,
when I restart syslog-ng on a client, the loghost prints these lines:
Jun 28 12:28:38 loghost syslog-ng[7068]: AF_INET client dropped connection from w.x.y.z, port 38171
Jun 28 12:28:39 loghost syslog-ng[7068]: AF_INET client connected from w.x.y.z, port 38040
Do I lose some information from the client? If yes, what can I do?
If you restart syslog-ng, then 1) some messages might arrive while syslog-ng itself is stopped. These messages are lost. 2) the messages that had been been accumulated in syslog-ng's output buffers can also be lost. I don't really see solutions for item 1) above, item 2) is solved by Premium Edition's disk buffer feature. You should not periodically trigger a restart, use the 'reload' functionality instead, that's much better in this regard. -- Bazsi