[syslog-ng]syslog-ng stops logging after one or two entries.. ..

Paul.Fiero@ci.austin.tx.us Paul.Fiero@ci.austin.tx.us
Thu, 24 Oct 2002 13:12:32 -0500


Drew,

I don't know if you saw my last post but the problem is taken care of.
Apparently what was happening is that the message that I am expecting to see
on the syslog-ng system was the same each time and it wasn't displaying the
message because it was identical.  By changing the syntax of the command
that generates the message I am logging it is different each time.  It all
works fine now.

Paul

-----Original Message-----
From: Hamilton, Andrew [mailto:Andrew.Hamilton@afccc.af.mil]
Sent: Thursday, October 24, 2002 1:07 PM
To: syslog-ng@lists.balabit.hu
Subject: RE: [syslog-ng]syslog-ng stops logging after one or two
entries.. ..


Paul,

Could you post your configuration file?

Drew

-----Original Message-----
From: Paul.Fiero@ci.austin.tx.us [mailto:Paul.Fiero@ci.austin.tx.us]
Sent: Thursday, October 24, 2002 1:23 PM
To: syslog-ng@lists.balabit.hu
Subject: RE: [syslog-ng]syslog-ng stops logging after one or two
entries.. ..


Drew,

I am not getting a core and syslog-ng just pounds right along.  Seems to log
for other things, just not this traffic coming from the remote host.  I have
run syslog-ng with the -dv switch from a shell prompt and there seems to be
little additional information that it wants to give me.  I am still getting
similar results....logs one or two messages from the remote machine then
just sits there and continues logging other traffic.

Paul

-----Original Message-----
From: Hamilton, Andrew [mailto:Andrew.Hamilton@afccc.af.mil]
Sent: Thursday, October 24, 2002 12:04 PM
To: syslog-ng@lists.balabit.hu
Subject: RE: [syslog-ng]syslog-ng stops logging after one or two
entries.. ..


Paul,

Shut the daemon down and run syslog-ng in a shell with the -dv switch.  This
will give you some debug information.  Are you getting a core dump?  You can
use strace or truss to watch it if you want to run those and watch the
system calls.  Without a little more info it will be difficult to help you.

Regards,

Drew

-----Original Message-----
From: Paul.Fiero@ci.austin.tx.us [mailto:Paul.Fiero@ci.austin.tx.us]
Sent: Thursday, October 24, 2002 12:59 PM
To: syslog-ng@lists.balabit.hu
Subject: [syslog-ng]syslog-ng stops logging after one or two entries....
Importance: High


I am new to syslog stuff but here is my problem.  I have syslog-ng v1.5.21
running on a RedHat Linux server.  I have a Mandrake 9 workstation running
plain ole syslogd.  The two boxes are talking to each other without a
problem but when a message is sent to the syslog-ng box it will log the
message once or twice but fails after that until syslog-ng and syslogd are
restarted on both boxes.  I am using this to log the status of an
application on several boxes to this one server about 30 times an hour (yes
it is huge overhead but is required for this application).  I need help with
this ASAP.


Paul Fiero
Information Security Analyst
City of Austin - ISD
Security Engineering
(512) 974-3559
paul.fiero@ci.austin.tx.us

CONFIDENTIALITY NOTICE: 
************************************************************************
The information contained in this ELECTRONIC MAIL transmission is
confidential. It may also be privileged work product or proprietary
information. This information is intended for the exclusive use of the
addressee(s). If you are not the intended recipient, you are hereby notified
that any use, disclosure, dissemination, distribution [other than to the
addressee(s)], copying or taking of any action because of this information
is strictly prohibited.
************************************************************************


_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html