Thank you, it seems to be corrected now. We believe the outgoing network destinations were blocking but a buffer was still being written to, so when we restarted the buffer was flushed. We are still investigating a root cause but the resolution so far has been to put a backup configuration file in place. We are now examining the configuration file differences. I can't really post that file here but I do appreciate your help. -Mark From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> On Behalf Of Gabor Nagy (gnagy) Sent: Tuesday, August 6, 2019 5:33 AM To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: [EXTERNAL] Re: [syslog-ng] Syslog-ng stops writing until restarted Can you give some details, please? E.g. some configuration detail, what do you see on the statistics output? I have one or two things in mind that can help. Gabor ________________________________ From: syslog-ng <syslog-ng-bounces@lists.balabit.hu<mailto:syslog-ng-bounces@lists.balabit.hu>> on behalf of Faine, Mark R. (MSFC-IS40)[NICS] <mark.faine@nasa.gov<mailto:mark.faine@nasa.gov>> Sent: Monday, August 5, 2019 20:58 To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu<mailto:syslog-ng@lists.balabit.hu>> Subject: [syslog-ng] Syslog-ng stops writing until restarted CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe. I have a strange problem where logs are definitely coming in over tcp and udp however they are not written, well not until I restart the server. Whenever I restart the logs are written but shortly after starting they stop until the server is restarted again. Any ideas on where I can look? Thanks, -Mark