syslog-ng split long rows
Hi, i try to do a simple configuration of syslog-ng: Konsole output source mailet_log { file("/opt/myApp/mylog.log"log_msg_size(81920)); }; destination mailet_test { file("/tmp/mylog_syslog.log"); }; log { source(mailet_log); destination(mailet_test); }; It works, but if i have in a source file a row that has Konsole output70410 70410 char (for example), in the destionation file i have two different row (first: 65024 char, second: 5433 char). Is it normal? can i configure syslog-ng to not split the lines? Thanks --
Look for `log-msg-size` option
Il 13/08/2015 11:43, Fabien Wernli ha scritto:
Look for `log-msg-size` option Hi, i had this log_msg_size(81920) in source:
source mailet_log { file("/opt/myApp/mylog.log"log_msg_size(81920)); }; Thanks --
Utf8 encoding may mean that a given amount of characters are encoded using more bytes. Log-msg-size specifies the limit in bytes. On Aug 13, 2015 12:05 PM, "Giovanni Mancuso" <giovanni.mancuso@par-tec.it> wrote:
Il 13/08/2015 11:43, Fabien Wernli ha scritto:
Look for `log-msg-size` option
Hi, i had this log_msg_size(81920) in source:
source mailet_log { file("/opt/myApp/mylog.log" log_msg_size(81920)); };
Thanks
--
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
Hi, I raised the log_msg_size parameter to a very high value, but i have the same problem. Il 13/08/2015 21:57, Scheidler, Balázs ha scritto:
Utf8 encoding may mean that a given amount of characters are encoded using more bytes.
Log-msg-size specifies the limit in bytes.
On Aug 13, 2015 12:05 PM, "Giovanni Mancuso" <giovanni.mancuso@par-tec.it <mailto:giovanni.mancuso@par-tec.it>> wrote:
Il 13/08/2015 11:43, Fabien Wernli ha scritto:
Look for `log-msg-size` option
Hi, i had this log_msg_size(81920) in source:
source mailet_log { file("/opt/myApp/mylog.log"log_msg_size(81920)); };
Thanks
--
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- *Giovanni Mancuso* System Architect *T* 06.9826.9600 *M* +39.340.65.80.739 *F* 06.9826.9680 P.zza S.Benedetto da Norcia, 33 - 00071 Pomezia (RM) Par-Tec S.p.A. <http://www.par-tec.it> Web Site <http://www.par-tec.it> info@par-tec.it <mailto:info@par-tec.it> Pagina Facebook <https://www.facebook.com/ParTecSpA> Profilo Twitter <https://twitter.com/partecspa> Pagina LinkedIn <https://www.linkedin.com/company/par-tec/> Canale YouTube <https://www.youtube.com/user/ParTecSpA> CONFIDENZIALE: Questo messaggio ed i suoi allegati sono di carattere confidenziale per i destinatari in indirizzo. È vietato l'inoltro non autorizzato a destinatari diversi da quelli indicati nel messaggio originale. Se ricevuto per errore, l'uso del contenuto è proibito; si prega di comunicarlo al mittente e cancellarlo immediatamente.
Hi, Another information, if i add to source an unix-stream: Konsole output Konsole output source mailet_log { file("/opt/myApp/mylog.log" log_msg_size(11819200)); unix-stream("/tmp/log" log_msg_size(11819200)); }; and i send 300000 char to unix socket, it works: Konsole output #!/usr/bin/perl use strict; use Socket; use IO::Handle; socket(TSOCK, PF_UNIX, SOCK_STREAM,0); connect(TSOCK, sockaddr_un("/tmp/log")) or print("ERROR!"); my @chars = ("A".."Z", "a".."z"); my $string; $string .= $chars[rand @chars] for 1..300000; print TSOCK "$string\n"; The problem seems to be only with file () source. Il 14/08/2015 11:24, Giovanni Mancuso ha scritto:
Hi,
I raised the log_msg_size parameter to a very high value, but i have the same problem.
Il 13/08/2015 21:57, Scheidler, Balázs ha scritto:
Utf8 encoding may mean that a given amount of characters are encoded using more bytes.
Log-msg-size specifies the limit in bytes.
On Aug 13, 2015 12:05 PM, "Giovanni Mancuso" <giovanni.mancuso@par-tec.it <mailto:giovanni.mancuso@par-tec.it>> wrote:
Il 13/08/2015 11:43, Fabien Wernli ha scritto:
Look for `log-msg-size` option
Hi, i had this log_msg_size(81920) in source:
source mailet_log { file("/opt/myApp/mylog.log"log_msg_size(81920)); };
Thanks
--
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
--
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
--
Hi, I've already seen someone on IRC mention this. I remember playing with `pad-size`. Could you try that? I know it's a bad solution, but maybe it will help find the cause. Cheers
This seems to be a bug then, however the same code is handling both unixdgram and the file source, only settings are different. Please file an issue so it can be dealt with. Cheers, Bazsi On Aug 13, 2015 11:02 AM, "Giovanni Mancuso" <giovanni.mancuso@par-tec.it> wrote:
Hi, i try to do a simple configuration of syslog-ng:
source mailet_log { file("/opt/myApp/mylog.log" log_msg_size(81920)); };
destination mailet_test { file("/tmp/mylog_syslog.log"); };
log { source(mailet_log); destination(mailet_test); };
It works, but if i have in a source file a row that has 70410 char (for example), in the destionation file i have two different row (first: 65024 char, second: 5433 char).
Is it normal? can i configure syslog-ng to not split the lines?
Thanks
--
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
participants (4)
-
Balazs Scheidler
-
Fabien Wernli
-
Giovanni Mancuso
-
Scheidler, Balázs