[syslog-ng]Syslog Dropping Information

Balazs Scheidler bazsi@balabit.hu
Tue, 7 May 2002 11:20:17 +0200


On Mon, May 06, 2002 at 10:23:40AM -0700, Jim Gifford wrote:
> So if I add the command to stop syslog-ng, do log rotation, then restart it
> should be fine. I will give it a try tonight.

The problem is that klogd doesn't recognize that /dev/log was reopened by
syslog-ng. syslog-ng doesn't need to be restarted, it's enough to restart
klogd after hupping syslog-ng.

alternatively fetch kernel messages without using klogd:

source s_kern { file("/proc/kmsg" log_prefix("kernel: ")); };

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1