[syslog-ng]Please help with logging remote machines
Balazs Scheidler
syslog-ng@lists.balabit.hu
Thu, 20 Nov 2003 16:02:00 +0100
On Wed, Nov 19, 2003 at 03:51:47PM -0600, Daniel Flick wrote:
> On Wed, 2003-11-19 at 14:50, Balazs Scheidler wrote:
> > On Wed, Nov 19, 2003 at 01:39:13PM -0600, Daniel Flick wrote:
> > > On Wed, 2003-11-19 at 12:26, Balazs Scheidler wrote:
> > > root 12087 0.0 0.0 1688 656 ? S 09:24 0:00 syslog-ng
> > > root 12091 0.0 0.0 1684 656 ? S 09:24 0:00 syslog-ng
> > > root 12095 0.0 0.0 1728 740 ? S 09:25 0:11 syslog-ng
> >
> > To my best knowledge syslog-ng forks only when it starts another program
> > (program destination). So it is not normal that you have this number of
> > syslog-ng processes.
> Would this make sense due to the fact that my destination creates a new
> file based on the host source? If so, that is encouraging.
> destination rlog { file("/var/log/$HOST/$MONTH.$DAY.log"
> create_dirs(yes) owner("log") group("log") perm(0600)); };
No, syslog-ng does not fork in this case.
> If the config looks good then I might just do a rebuild to Gentoo and
> try again. Did you see any obvious errors in my syslog-ng.conf? Thanks
> very much for the assistance. I learned quite a bit!
it seems to be ok.
--
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1