Hello, I have a strange behaviour with syslog-ng 1.4.16 and rotated files. It looks like syslog-ng keeps file descriptors opened, despite the time_reap parameter, in a file where very few logs are sent. This generates problems with log rotations. Here is my syslog-ng.conf (extract). --------------8<---------------- options { long_hostnames(off); sync(0); owner("root"); group("adm"); perm(0644); time_reap(30); }; source src { unix-stream("/dev/log"); internal(); udp(); }; filter f_heartbeat { facility(local7) and program(heartbeat/syslog-ng); }; destination d_heartbeat { file("/usr2/log/heartbeat.log"); }; log { source(src); filter(f_heartbeat); destination(d_heartbeat); }; -------------->8---------------- Important points are: target file is /usr2/log/heartbeat.log, time_reap is set to 30. My "heartbeat" application is logging every 5 minutes in this file, with the appname "heartbeat/syslog-ng". *This is the only line logged to this destination*. So we have 5 minutes of inactivity between 2 logs. I rotate heartbeat.log every 5 minutes too, 3 minutes after the call to the heartbeat application. I am using savelog for the rotation. My problem: syslog-ng keeps a file descriptor opened on the after the rotation. I don't understand why the time_reap parameter (set to 30) is ignored. Did i miss anything? Thank you in advance for your help, Xavier de Labouret