RE: [syslog-ng][PATCH] please test: syslog-ng message mangling fi x

21 Aug 2002

      Here's my conf in full:

### Syslog-NG Config File

# Global Options
options {
#  time_reopen(60);
#  mark(1200);
  stats(1200);
  chain_hostnames(no);
  use_dns(no);
  gc_idle_threshold(100);
  gc_busy_threshold(10000);
  log_fifo_size(2000);
  log_msg_size(2048);
  sync(0);
};

# Source Objects
source s_local { internal(); };
source s_kernel { file("/proc/kmsg" log_prefix("kernel: ")); };
source s_devlog { unix-stream("/dev/log" max-connections(150)); };
source s_udp514 { udp(); };
source s_tcp514 { tcp(ip("127.0.0.1") max-connections(150) keep-alive(yes));
};

# Destination Objects
destination d_varlog { file("/var/log/log"); };
destination d_tty8 { pipe("/dev/tty8"); };
destination d_logresp { pipe("/usr/local/logrespond/fifo/log"
owner(logrespond) group(root) perm(0600) ); };
destination d_logtraq { pipe("/usr/local/logtraq/logpipe" owner(root)
group(logtraq) perm(0640) ); };

# Log Paths
log {
  source(s_local);
  source(s_kernel);
  source(s_devlog);
  source(s_udp514);
  source(s_tcp514);

  destination(d_varlog);
  destination(d_tty8);
  destination(d_logresp);
  destination(d_logtraq);
};

---
Dustin D. Trammell
Information Security Specialist
Penson Financial Services, Inc.

-----Original Message-----
From: Stephen Frost [mailto:sfrost@snowman.net]
Sent: Wednesday, August 21, 2002 11:56
To: syslog-ng@lists.balabit.hu
Subject: Re: [syslog-ng][PATCH] please test: syslog-ng message mangling
fi x

* Dustin Trammell (DTrammell@PENSON.COM) wrote:
...
(sigh) ... At least they're no longer getting mangled (as far as I can
tell,
I haven't seen any mangled lines since I patched), but some entries are
still getting split between two or more lines.  Any ideas Balazs?
What's your syslog-ng.conf look like in the sources part?

	Stephen