Can you show your source declaration? Do you use systemd journal?

On Aug 22, 2015 2:56 AM, "Saurabh Shukla" <saurabh@purestorage.com> wrote:

I am running syslog-ng 3.6.4 and I have the following destination and log path configured that forwards all messages to the destination:

destination remote {

    network("remote.example.com" port(514) transport(tcp) log_fifo_size(2048));

};

log { source(s_all); destination(remote); flags(flow-control);};

When the system reboots, I see that startup messages from the kernel are logged into /var/log/syslog.

syslog-ng establishes a connection to the remote destination around 10 sec after the first message was logged into /var/log/syslog. However, it fails to forward any message that was logged into /var/log/syslog during the first 10 seconds even though I have the output buffer and flow control configured.

Is this a bug in syslog-ng or am I missing some configuration steps?

Thanks,

-- Saurabh

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq