[syslog-ng][PATCH] please test: syslog-ng message mangling fi
x
Dustin Trammell
DTrammell@PENSON.COM
Wed, 21 Aug 2002 12:06:20 -0500
Here's my conf in full:
### Syslog-NG Config File
# Global Options
options {
# time_reopen(60);
# mark(1200);
stats(1200);
chain_hostnames(no);
use_dns(no);
gc_idle_threshold(100);
gc_busy_threshold(10000);
log_fifo_size(2000);
log_msg_size(2048);
sync(0);
};
# Source Objects
source s_local { internal(); };
source s_kernel { file("/proc/kmsg" log_prefix("kernel: ")); };
source s_devlog { unix-stream("/dev/log" max-connections(150)); };
source s_udp514 { udp(); };
source s_tcp514 { tcp(ip("127.0.0.1") max-connections(150) keep-alive(yes));
};
# Destination Objects
destination d_varlog { file("/var/log/log"); };
destination d_tty8 { pipe("/dev/tty8"); };
destination d_logresp { pipe("/usr/local/logrespond/fifo/log"
owner(logrespond) group(root) perm(0600) ); };
destination d_logtraq { pipe("/usr/local/logtraq/logpipe" owner(root)
group(logtraq) perm(0640) ); };
# Log Paths
log {
source(s_local);
source(s_kernel);
source(s_devlog);
source(s_udp514);
source(s_tcp514);
destination(d_varlog);
destination(d_tty8);
destination(d_logresp);
destination(d_logtraq);
};
---
Dustin D. Trammell
Information Security Specialist
Penson Financial Services, Inc.
-----Original Message-----
From: Stephen Frost [mailto:sfrost@snowman.net]
Sent: Wednesday, August 21, 2002 11:56
To: syslog-ng@lists.balabit.hu
Subject: Re: [syslog-ng][PATCH] please test: syslog-ng message mangling
fi x
* Dustin Trammell (DTrammell@PENSON.COM) wrote:
> (sigh) ... At least they're no longer getting mangled (as far as I can
tell,
> I haven't seen any mangled lines since I patched), but some entries are
> still getting split between two or more lines. Any ideas Balazs?
What's your syslog-ng.conf look like in the sources part?
Stephen