I noticed it&#39;s not just sql logging related. If I&#39;ve added any additional destination to any existed log filters Syslog-ng stops writing logs to both destinations after ~1min.<br>Any thoughts?<br><br><div class="gmail_quote">

On Tue, Sep 18, 2012 at 1:28 PM, Anton Koldaev <span dir="ltr">&lt;<a href="mailto:koldaevav@gmail.com" target="_blank">koldaevav@gmail.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

<div>Hello,</div><div><div>I have the same &quot;expr&quot; logs going to file AND sql. With file-only logging it works great.</div><div>When I&#39;m enabling SQL logging it stops writing both to file and to sql ~1-10min(from 10 000 to 200 000 lines) after start.</div>


<div>Every time there are no dropped messages, but 1000 stored for SQL location.</div></div><div><br></div>syslog-ng 3.3.6<div><div><ul><li>number of nodes: ~150</li><li>max-connections(200)</li><li>log_iw_size(20000)</li>


<li>log_fetch_limit(100)</li><li>log_fifo_size (400000);</li><li>flush_lines(100)</li><li>flush_timeout(100)</li><li>flags(flow-control) # the same issue with and without flow control</li></ul></div><div><div><div>syslog-server ~ % sudo syslog-ng-ctl stats | sort -rnk6 -t &quot;;&quot; | grep expr</div>


<div>dst.file;d_app_expr#0;/logs/app/expr.log;o;processed;30457</div><div>destination;d_app_expr;;a;processed;30457</div><div>destination;d_mysql_expr;;a;processed;30003</div><div><b>dst.sql;d_mysql_expr#0;mysql,mysql-db-ip,port,syslog_production,expr_${HOST}_${R_Y;a;stored;1000</b></div>


<div>dst.sql;d_mysql_expr#0;mysql,mysql-db-ip,port,syslog_production,expr_${HOST}_${R_Y;a;dropped;0</div><div>dst.file;d_app_expr#0;/logs/app/expr.log;o;stored;0</div><div>dst.file;d_app_expr#0;/logs/app/expr.log;o;dropped;0</div>


</div><div><br></div><div><div>I see no errors in syslog-ng debug logs or mysql error log.</div><div>After restarting syslog-ng it writes both logs for some time and stops again.</div><div><br></div><div>I will appreciate any help.</div>


<div><br></div><div>Additional question: is there any mysqltuner.pl-like tool for syslog-ng? I don&#39;t feel happy to tune all those buffers and windows manually with no being sure it will help.</div><span class="HOEnZb"><font color="#888888"><div>

<br></div>-- <br>
Best regards,<br>Koldaev Anton<br>
</font></span></div></div></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br>Best regards,<br>Koldaev Anton<br>