I've got syslog-ng 1.4.3 running on a Solaris 2.6 host. When I modify the syslog-ng.conf file and HUP the server, I get an (apparent) empty wall from root:
Broadcast message from root (???) on syslog Tue Jun 13 17:00:16...
Is this a feature or a bug? Is there any way to mask it? I've tried disabling all lines in the syslog-ng.conf file which output to users or ttys to no avail.
Syslog-ng can't broadcast messages to users, at least it doesn't format the message like above. If '*' is used as username, a logline is sent to each logged in user, but no header is printed. One possible reason might be that some program lost the connection to syslog-ng, and the syslog function in your libc tries to broadcast the message to all your terminals in this case. Try to truss syslog-ng to check if it produces this message, or something else. -- Bazsi