[syslog-ng]Lost of facility/level
Jerome Peducasse
peducasse@echo.fr
Tue, 2 Apr 2002 11:32:54 +0100
Hi,
I'm using syslog-ng 1.5.15 and sometimes (probably during message burst), messages lost their facility/level and are logged with user/notice. Message format becomes:
Mar 29 11:35:50 w3search3 in void echo::AtlasClient::onRead(void *):AtlasClient.cc:427 <130>Mar 29 11:35:50 w3search[19816]: read Context failed on socket=3 in void echo::AtlasClient::onRead(void *):AtlasClient.cc:434
instead of:
Mar 29 11:32:07 w3search3 w3search[19817]: read Context failed on socket=3 in void echo::AtlasClient::onRead(void *):AtlasClient.cc:434
General log_fifo_size is set to 1000 and is set to 10000 for appropriate filter of this message:
destination d_applicatif { file("/ke/logs/ke.log" owner(test) group(test) log_fifo_size(10000) ); };
filter f_applicatif { facility(local0); };
log {
source(s_sys);
filter(f_applicatif);
destination(d_applicatif);
destination(d_loghost_applicatif);
flags(final);
};
Any Idea ?
--
Jerome Peducasse