[Bug 136] New: duplicated logpaths gives no error
https://bugzilla.balabit.com/show_bug.cgi?id=136 Summary: duplicated logpaths gives no error Product: syslog-ng Version: 3.2.x Platform: PC OS/Version: Linux Status: NEW Severity: normal Priority: unspecified Component: syslog-ng AssignedTo: bazsi@balabit.hu ReportedBy: balazs.nemeth@balabit.com Type of the Report: --- Estimated Hours: 0.0 During my daily work I started to experience to receive every log message twice. It turned out that I made a silly copy&paste mistake but syslog-ng showed no warning or something like that at all. Steps to reproduce: 1) create a config like this # snippet start parser pattern_db { db_parser( file("/var/lib/misc/patterndb.xml") ); }; source s_netcat { tcp(ip(127.0.0.1) port(5514)); }; destination d_patterndb { file("/var/log/hosts/$HOST/$R_YEAR.$R_MONTH.$R_DAY/messages-${.classifier.class}"); }; log{ source(s_netcat); parser(pattern_db); destination(d_netcat); }; log{ source(s_netcat); parser(pattern_db); destination(d_netcat); }; # snippet end 2) send logs with netcat 3) check that every log message arrives twice to the given destination syslog-ng 3.2.4 Installer-Version: 3.2.4 Revision: ssh+git://bazsi@git.balabit//var/scm/git/syslog-ng/syslog-ng-ose--mainline--3.2#master#ef7b91e4a1b1f9628c66138b4ae83de7e4c697c6 Compile-Date: Aug 16 2011 09:13:16 Enable-Threads: off Enable-Debug: off Enable-GProf: off Enable-Memtrace: off Enable-Sun-STREAMS: off Enable-IPv6: on Enable-Spoof-Source: off Enable-TCP-Wrapper: on Enable-SSL: on Enable-SQL: off Enable-Linux-Caps: off Enable-Pcre: on Enable-Pacct: off -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=136 --- Comment #1 from Balázs Németh <balazs.nemeth@balabit.com> 2011-09-29 11:35:27 --- I think at least a warning would be handy in theses cases. -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=136 Gergely Nagy <algernon@balabit.hu> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |algernon@balabit.hu --- Comment #2 from Gergely Nagy <algernon@balabit.hu> 2011-09-29 11:44:41 --- (In reply to comment #1)
I think at least a warning would be handy in theses cases.
I agree. On a similar note, debian bug #642479 (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642479) raised a similar request: warn the user if syslog-ng is configured to not log anything. I'd treat both requests in a single bug, as they're pretty much about informing the user about possible mistakes in the config. Though, if so need be, I can forward the debian bug separately. -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=136 --- Comment #3 from Gergely Nagy <algernon@balabit.hu> 2011-09-29 12:09:09 ---
On a similar note, debian bug #642479 (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642479) raised a similar request: warn the user if syslog-ng is configured to not log anything.
I'd treat both requests in a single bug, as they're pretty much about informing the user about possible mistakes in the config. Though, if so need be, I can forward the debian bug separately.
Disregard this path. I'll forward that feature request as a separate issue. I was convinced the two are better handled separately. (The other one is slightly easier, this issue at hand has some tricky bits...) -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=136 Balazs Scheidler <bazsi@balabit.hu> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution| |WONTFIX Status|NEW |RESOLVED --- Comment #4 from Balazs Scheidler <bazsi@balabit.hu> 2011-09-29 17:19:38 --- I don't agree, the defined semantics for log statements is to process all of them iteratively and in order. If you have two identical rules, it'll be processed twice. -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
participants (1)
-
bugzilla@bugzilla.balabit.com