We get various data points on the process connecting via /dev/log via recvmsg() that returns this in an aux buffer, statically sized to 1024. It's interesting that you have more. If you can reproduce it, can you strace syslog-ng to see what is coming aux data? This can be resized but that needs a recompilation. On Jul 6, 2016 11:18 PM, "Noémi Ványi" <sitbackandwait@gmail.com> wrote: Hi! It seems to me that aux buffer size is a hard-coded value. So it cannot be configured using the config file. I guess the size could be increased, but I am curious what the devs of syslog-ng would say. :) On 6 July 2016 at 22:09, Evan Rempel <erempel@uvic.ca> wrote:

I got this log line out of syslog-ng, but I'm not sure what it really means.

Can anyone shed some slight on it and let me know how I can increase the aux buffer size?

syslog-ng[29712]: Transport aux data overflow, some fields may not be associated with the message, please increase aux buffer size; aux_size='1024'

______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq

______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq