Thank you, it seems to be corrected now.  We believe the outgoing network destinations were blocking but a buffer was still being written to, so when we restarted the buffer was flushed.  We are still investigating a root cause but the resolution so far has been to put a backup configuration file in place.  We are now examining the configuration file differences.   I can’t really post that file here but I do appreciate your help. 

-Mark

From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> On Behalf Of Gabor Nagy (gnagy)
Sent: Tuesday, August 6, 2019 5:33 AM
To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu>
Subject: [EXTERNAL] Re: [syslog-ng] Syslog-ng stops writing until restarted

Can you give some details, please? E.g. some configuration detail,  what do you see on the statistics output?

I have one or two things in mind that can help.

Gabor

---

From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Faine, Mark R. (MSFC-IS40)[NICS] <mark.faine@nasa.gov>
Sent: Monday, August 5, 2019 20:58
To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu>
Subject: [syslog-ng] Syslog-ng stops writing until restarted

CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.

I have a strange problem where logs are definitely coming in over tcp and udp however they are not written, well not until I restart the server.  Whenever I restart the logs are written but shortly after starting they stop until the server is restarted again.

Any ideas on where I can look?

Thanks,

-Mark