[syslog-ng]Please help with logging remote machines

Balazs Scheidler syslog-ng@lists.balabit.hu
Thu, 20 Nov 2003 16:02:00 +0100


On Wed, Nov 19, 2003 at 03:51:47PM -0600, Daniel Flick wrote:
> On Wed, 2003-11-19 at 14:50, Balazs Scheidler wrote:
> > On Wed, Nov 19, 2003 at 01:39:13PM -0600, Daniel Flick wrote:
> > > On Wed, 2003-11-19 at 12:26, Balazs Scheidler wrote:
> > > root     12087  0.0  0.0  1688  656 ?        S    09:24   0:00 syslog-ng
> > > root     12091  0.0  0.0  1684  656 ?        S    09:24   0:00 syslog-ng
> > > root     12095  0.0  0.0  1728  740 ?        S    09:25   0:11 syslog-ng
> > 
> > To my best knowledge syslog-ng forks only when it starts another program
> > (program destination). So it is not normal that you have this number of
> > syslog-ng processes.
> Would this make sense due to the fact that my destination creates a new
> file based on the host source?  If so, that is encouraging.  
> destination rlog { file("/var/log/$HOST/$MONTH.$DAY.log"
> create_dirs(yes)      owner("log") group("log") perm(0600)); };

No, syslog-ng does not fork in this case.

> If the config looks good then I might just do a rebuild to Gentoo and
> try again.  Did you see any obvious errors in my syslog-ng.conf?  Thanks
> very much for the assistance.  I learned quite a bit!

it seems to be ok.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1