thanks for the suggestion.

I guess we can try it. though I wonder if this works with our version of syslog-ng.

The documentation here suggests that  " Syslog-ng 2.0 on the other hand restarts the program if it exits"

 

http://www.balabit.com/products/syslog_ng/reference-2.0/syslog-ng.html/index.html#id2526014
 

> You could have your log rotation process kill the readlog before rotating.