Hi, You can use "dqtool cat" to extract messages from disk-queue files and then reinject them using logger for instance. syslog-ng drops queue files in case the config changes or an error occurs, but once it leaves one behind, it'll never touch it again. Also, please note that you can submit questions to our support team, which is probably more timely than doing the same on this mailing list :) On Tue, 2012-03-20 at 15:05 -0700, Aaron Daniel wrote:

In the LTS version of PE, we have some servers that have old disk-buffer files (var/*qf) still on disk, with the contents not sent to a central server. Is there a way to force syslog-ng to re-process those, or do we have to manually process them ourselves?

The files contain very old log entries that still need to be processed, and syslog-ng appears to be using a newer *.qf file for it's disk buffer. When it does this, it's completely ignoring the old log entries so we have some gaps in our central processing system.

(Sorry if this has been asked before, google's not been my friend on this search...)

-- Bazsi