We get various data points on the process connecting via /dev/log via recvmsg() that returns this in an aux buffer, statically sized to 1024.
It's interesting that you have more. If you can reproduce it, can you strace syslog-ng to see what is coming aux data?
This can be resized but that needs a recompilation.
Hi!It seems to me that aux buffer size is a hard-coded value. So it cannot be configured using the config file.
I guess the size could be increased, but I am curious what the devs of syslog-ng would say. :)On 6 July 2016 at 22:09, Evan Rempel <erempel@uvic.ca> wrote:I got this log line out of syslog-ng, but I'm not sure what it really means.
Can anyone shed some slight on it and let me know how I can increase the
aux buffer size?
syslog-ng[29712]: Transport aux data overflow, some fields may not be
associated with the message, please increase aux buffer size;
aux_size='1024'
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq