I have to agree with Alex. You can't run your system with /var filling up regularly and expect to get away with it. Even if syslog-ng is modified to survive this you will find that lots of other daemons and processes on your system will not tolerate running with /var full. Most application programmers don't build that sort of tolerance into their code.
Date: Thu, 21 Feb 2008 15:15:23 +0000 From: ac56@soas.ac.uk To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng] syslog-ng does not resume log when disk is full at
...
Sorry to be horribly brutal but surely time would be better spent on fixing the problem rather than helping at the recovery phase. The fact that syslog-ng is not able to dump data is a non-issue (the way I see it) when free space is created...the issue is that you have run out of space in the first place. ...
Sorry to sound harsh, but to me this is a no-brainer
Cheers
Alex
Get 30 Free Emoticons for your Windows Live Messenger http://www.livemessenger-emoticons.com/en-ie