[syslog-ng] FW: Mark from 1.9.4 to 1.9.5

Edward Brookhouse ebroo at healthydirections.com
Thu Aug 4 13:29:02 CEST 2005




I thought about that - but there is no call being made from syslog-ng
startup out to /etc/sysconfig as is typical to get options. The options
as specified in the startup were just -f configfile .

The -m only works for syslogd not syslog-ng (unless the man page was
wrong didn't look through the source)


I am hesitant to say it's fixed just yet but I believe that adding 

mark_freq(0);

To the conf file has turned off the mark - 

Thanks again Roberto!!!

Edward

-----Original Message-----
From: syslog-ng-bounces at lists.balabit.hu
[mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Frans
Stekelenburg
Sent: Thursday, August 04, 2005 3:44 AM
To: Syslog-ng users' and developers' mailing list
Subject: RE: [syslog-ng] FW: Mark from 1.9.4 to 1.9.5


Are you absolutly sure it isn't a setting somewhere in /etc?
 
You may set the interval to anything you like on Debian by editing
/etc/init.d/sysklogd. This sets it to 60 minutes: 

SYSLOGD="-m 60" 

(Then restart the syslog daemon: # /etc/init.d/sysklogd restart ) 

On Red Hat and derivatives, edit /etc/sysconfig/syslog : 

SYSLOGD_OPTIONS="-m 60" 

Must come from somewhere, right? ;-)




________________________________

	From: Edward Brookhouse [mailto:ebroo at healthydirections.com] 
	Sent: woensdag 3 augustus 2005 18:56
	To: 'Syslog-ng users' and developers' mailing list'
	Subject: [syslog-ng] FW: Mark from 1.9.4 to 1.9.5
	
	

	I was mistaken - the - MARK - is back -

	 

	My only option left is to hack the source and remove the
function and the reference to it - 

	 

	Anyone have any other suggestions for getting rid of the Mark
???

	 

	Is there a compile time option to turn this off???

	 

	Even stranger is that the source declares:

	 

	cfg.c:  self->mark_freq = 1200; /* 20 minutes */

	 

	but I am seeing a mark once an hour 

	 

	TIA

	 

	EB

	 

	________________________________

		From: Edward Brookhouse
[mailto:ebroo at healthydirections.com] 
	Sent: Wednesday, August 03, 2005 9:58 AM
	To: 'Syslog-ng users' and developers' mailing list'
	Subject: Mark from 1.9.4 to 1.9.5

	 

	Hi all,

	 

	Using 1.9.4 I experienced the -Mark-being inserted although no
mark() option was specified in the config - 

	 

	I just upgraded to the 1.9.5 source and the behavior of mark
seems to be back to normal - 

	 

	Just FYI 

	 

	E

_______________________________________________
syslog-ng maillist  -  syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html







More information about the syslog-ng mailing list