[syslog-ng] Delay writing to files
Paolo Supino
vrkid at yahoo.com
Mon Dec 26 12:14:21 CET 2005
Hi
Here is an update on the interval in writing to the log file:
the output of ls -l on the file:
-rw-r--r-- 1 root root 6234 Dec 26 08:03 switch-01.log
and the last messsege coming in on the NIC (captured by tcpdump):
12:56:57.564348 IP switch-01.1024 > syslog.hot.net.il.syslog: UDP,
length 75
As you can see the time interval is almost 5 hours... :-(
TIA
Paolo
--- Nate Campi <nate at campin.net> wrote:
> On Sun, Dec 25, 2005 at 11:15:18PM -0800, Paolo Supino wrote:
> >
> > Thanx Nate. But for some reason sync doesn't do it in my
> > configuration. I have the following global section in my
> configuration:
> > options { sync (0);
> > time_reopen (1);
> > log_fifo_size (999999);
> > long_hostnames (yes);
> > use_dns (yes);
> > dns_cache(yes);
> > dns_cache_size(1000);
> > dns_cache_expire(604800);
> > use_fqdn (yes);
> > create_dirs (yes);
> > keep_hostname (yes);
> > };
> > and still messages are written in delay to the files:
>
> What kind of delay are we talking about here? I'd think that the only
> remaining cause of delay isn't syslog-ng but the OS and/or your C
> libraries, but maybe something weird is going on.
> --
> Nate
>
> "If you torture the data enough, it will confess." ~ Ronald Coase.
>
>
> _______________________________________________
> syslog-ng maillist - syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at
> http://www.campin.net/syslog-ng/faq.html
>
>
__________________________________________
Yahoo! DSL Something to write home about.
Just $16.99/mo. or less.
dsl.yahoo.com
More information about the syslog-ng
mailing list