[syslog-ng] Syslog stop fordward

[Victor Barahona]

-----BEGIN PGP SIGNED MESSAGE-----

Hi

I loging a web server to a log-machine so I put the next configuration in
the web server:
----------------
options { sync(0); time_reopen(10); log_fifo_size(100); };

source local { sun-stream("/dev/log" door("/etc/.syslog_door")); };
source syslog { internal(); };
source rincon { file("/www/logs/rincon-access.log"); };

destination brezo { tcp("150.244.9.2" port(514)); };

log { source(rincon); destination(brezo); };
-----------------------------------------------

The log-server has this config-file:

-----------------------------------------------
options { sync(10); time_reopen(10); log_fifo_size(100); };

source local { internal(); };
source red { tcp(); };

destination rincon { file("/var/log/filer/rincon-access.log"); };

filter rincon { host(limonero) and match(HTTP/1); };

log { source(red); destination(rincon); };
------------------------------------------------------

When I run with this configuration, te log-server stops to write lines in
the file when fifo size is full (I think) so I increase the fifo size to
1000 first and to 150000 later. The destination file grown but seems no
be sort by date as the source and finally stops the write lines (but the
daemon is OK).

Two things:

1)Everytime I run the syslog-ng in the web server, process all the file,
instead only the appending lines. Who can I chage this?

2)Why the daemon stops writting in the log-server's file? It's a problem
with big files? The origin file is about 8Mb and it grow to 11Mb due the
header of the syslog-ng. There is some limit?

Thanks


--
"Making predictions is difficult, particularly about the future"
							      Niels Bohr
------------------------------------------------------------------------
Victor Barahona..........................http://www.sdi.uam.es/~barahona
Soporte Seguridad en red.................http://www.sdi.uam.es/utc/ss
Unidad Tecnica de Comunicaciones
Universidad Autonoma de Madrid
Tlf.- 91 397 5525                                      PGP ID-0x8750AB79
------------------------------------------------------------------------


-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
MessageID: DwGwcnUdWLU9WfN4xS9DVnhJ0deLgA1M

iQA/AwUBOKrOekoW8ByHUKt5EQICpgCfWBkBFnAR+/iGjZSTBX8vFqdBBRkAoIpq
A9+ShW9YEy1RbygI+P8Yzfyb
=6Ii6
-----END PGP SIGNATURE-----