[syslog-ng]syslog-ng-1.6.0rc3 crashes after some hours

Rudolfs Osins syslog-ng@lists.balabit.hu
Thu, 14 Aug 2003 09:55:03 +0300


--Boundary-00=_HJzO/8kKr0FXPjP
Content-Type: text/plain;
  charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hello everyone,

I have the folloving problem:

After some hours as daemon (~1 - 2h) syslog-ng crashes, leaving no info on 
what happened in the logs or elsewhere. I run the daemon with 
syslog-ng -u syslog-ng -g syslog-ng
and the user and group exists in the system. The config file I use is 
attached.
Compile options are following:

libol-0.3.10
./configure --prefix=/usr/local/opt/libol
make

syslog-ng-1.6.0rc3
./configure --prefix=/usr/local/opt/syslog-ng 
--with-libol=/usr/src/libol-0.3.10
make
make install

The system is a celeron 1700Mhz with 128Mb ram and there are just 2 other 
proccesses beside syslog-ng - fcron and ntpd.

Another question is: when I delete a logfile when syslog-ng is still running 
for the first time, syslog-ng recreates the file, when it recives a message 
thats destination is the deleted file, but when I delete the same file a 
second time, it's not being recreated. Is there a way to make syslog-ng 
recreate the file everytime ?

And the last question is, when could the message encryption feature be 
implemented ?

Btw. great work ! Syslog-ng is a really good product !

best regards,
Rudolfs


--Boundary-00=_HJzO/8kKr0FXPjP
Content-Type: text/plain;
  charset="us-ascii";
  name="syslog-ng.conf"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="syslog-ng.conf"

# syslog-ng configuration file.
#
#
# See syslog-ng(8) and syslog-ng.conf(5) for more information.
#
# n3on@dc.lv
#


### Global options

options { sync (0);
          time_reopen (10);
	  time_reap (10);
          log_fifo_size (1000);
          long_hostnames (off);
          use_dns (no);
          use_fqdn (no);
          create_dirs (yes);
          keep_hostname (no);
	  owner(syslog-ng);
	  group(syslog-ng);
        };


### Source drivers

source src_kernel { pipe ("/proc/kmsg"); };
source src_syslog-ng { internal (); };
source src_local { unix-stream ("/dev/log"); };


### Destination drivers

destination dst_kernel { file (
				"/var/log/localhost/$DAY.$MONTH.$YEAR/kernel.log"
				template("[$WEEKDAY $HOUR:$MIN:$SEC]  $MESSAGE [$LEVEL]\n")
				template_escape(no) 
			      ); 
		       };

destination dst_syslog-ng { file (
				   "/var/log/localhost/$DAY.$MONTH.$YEAR/syslog-ng.log"
				   template("[$WEEKDAY $HOUR:$MIN:$SEC]  $MESSAGE [$LEVEL]\n")
				   template_escape(no) 
			         ); 
			  };

destination dst_sshd      { file (
				   "/var/log/localhost/$DAY.$MONTH.$YEAR/sshd.log"
				   template("[$WEEKDAY $HOUR:$MIN:$SEC]  $MESSAGE [$LEVEL]\n")
				   template_escape(no)
			         ); 
			  };

destination dst_fcron     { file (
				   "/var/log/localhost/$DAY.$MONTH.$YEAR/fcron.log"
				   template("[$WEEKDAY $HOUR:$MIN:$SEC]  $MESSAGE [$LEVEL]\n")
				   template_escape(no)
			         ); 
			  };

destination dst_remain    { file (
				   "/var/log/localhost/$DAY.$MONTH.$YEAR/remaining.log"
				   template("[$WEEKDAY $HOUR:$MIN:$SEC]  $MESSAGE [$LEVEL]\n")
				   template_escape(no)
			         ); 
			  };

destination dst_rpm-list  { file (
				   "/var/log/localhost/$DAY.$MONTH.$YEAR/rpm-list.log"
				   template("$MESSAGE\n")
				   template_escape(no)
			         ); 
			  };

destination dst_ntpd      { file (
				   "/var/log/localhost/$DAY.$MONTH.$YEAR/ntpd.log"
				   template("[$WEEKDAY $HOUR:$MIN:$SEC]  $MESSAGE [$LEVEL]\n")
				   template_escape(no)
			         ); 
			  };


destination dst_scripts   { file (
				   "/var/log/localhost/$DAY.$MONTH.$YEAR/scripts.log"
				   template("[$WEEKDAY $HOUR:$MIN:$SEC]  $MESSAGE [$LEVEL]\n")
				   template_escape(no)
			         ); 
			  };

destination dst_debug	  { file (
				  "/var/log/localhost/$DAY.$MONTH.$YEAR/debug.log" 
                    		  template("[$WEEKDAY $HOUR:$MIN:$SEC]  $MESSAGE [$LEVEL - $FACILITY]\n")
				  template_escape(no)
				 );
		          };

destination dst_net	  { tcp ( "10.148.62.9" port(666) ); };


### Filters

filter fltr_sshd { program("sshd"); };
filter fltr_fcron { program("fcron"); };
filter fltr_syslog-ng { program("syslog-ng"); };
filter fltr_rpm-list { program("rpm"); };
filter fltr_ntpd { program("ntpd"); };
filter fltr_scripts { program("script"); };
filter fltr_remain { (not program("sshd")) and 
		     (not program("fcron")) and 
		     (not program("syslog-ng")) and 
		     (not program("rpm")) and 
		     (not program("script")) and 
		     (not program("ntpd"));};


### Logs

log { source(src_kernel); destination(dst_kernel); };
log { source(src_syslog-ng); source(src_local); filter(fltr_syslog-ng); destination(dst_syslog-ng); };
log { source(src_local); filter(fltr_sshd); destination(dst_sshd); };
log { source(src_local); filter(fltr_fcron); destination(dst_fcron); };
log { source(src_local); filter(fltr_rpm-list); destination(dst_rpm-list); };
log { source(src_local); filter(fltr_ntpd); destination(dst_ntpd); };
log { source(src_local); filter(fltr_scripts); destination(dst_scripts); };
log { source(src_local); filter(fltr_remain); destination(dst_remain); };
log { source(src_kernel); source(src_syslog-ng); source(src_local); destination(dst_debug); };
log { source(src_kernel); source(src_syslog-ng); source(src_local); destination(dst_net); };


--Boundary-00=_HJzO/8kKr0FXPjP--