[syslog-ng]Not writing to new logfile after rotate and restart

Livens Wim WLivens@colt-telecom.be
Mon, 18 Feb 2002 13:00:27 +0100


I have a rather straightforward syslog-ng.conf.  I write all messages from
the local host to /var/adm/messages and things that come from the net to a
separate (customer specific file) filtered on the source host.  All works
well except that I can't rotate the customer specific logfiles.  I can
rotate /var/adm/messages.  

doing:
# mv /var/adm/messages /var/adm/messages.0 
# kill -HUP `cat /etc/syslog-ng/syslog-ng.pid`

and new log are written to /var/adm/messages

BUT:
# mv /data/customer-logs/491 /data/customer-logs/491.0
# kill -HUP `cat /etc/syslog-ng/syslog-ng.pid`

and new messages are still written to data/customer-logs/491.0

I also tried stopping and starting syslog-ng and moving the file somewhere
completly different.  
It still magically remembers the old file.

Any idea ??

Relevant part of my config:

source local { sun-streams("/dev/log" door("/etc/.syslog_door"));
internal(); };
destination syslogfile { file("/var/adm/messages"); };
log { source(local); destination(syslogfile); };

source net { udp(); };
filter filter491 { host("12.34.56.78");};
destination logfile491 { file("/data/customer-logs/log491" perm(0644)); };
log { source(net); filter(filter491); destination(logfile491); };

(I'm using syslog-ng-1.4.14 on SunOS 5.8 sparc)


Thanks,

-- 
Wim Livens.
IP Security Engineer.
C o l t  B e l g i u m