I have following lines in syslog-ng.conf
filter aaa { match ("aaa"); }; destination aaa { program ("/usr/bin/mail -s WARN user"); }; log { source(src); filter (aaa); destination(aaa); };
When I run logger: # logger aaaIIII in messages file I have: Apr 5 13:06:26 src@host syslog-ng[1627]: io.c: do_write: write() failed (errno 32), Broken pipe
What does it mean ? It happen from time to time, not always.
probably the mail program exits for some reason... you may try to write a wrapper script sending logs in a batch, e.g.: repeat while something is available: read 100 lines, mail it loop maybe mail can't read messages exceeding some limit in size. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt