[syslog-ng] Delay writing to files
Paolo Supino
vrkid at yahoo.com
Tue Dec 27 15:24:38 CET 2005
Hi
I went to acheck what is the situation in the firewall log file and
here is what I found:
Dec 27 16:22:27 fwmgmt/fwmgmt logger: 10:00:19 drop ....
The date on fwmgmt is set correctly and shows the current time.
TIA
Paolo
PS - I will try to remove the firewall logging and see if it will make
a difference.
--- Balazs Scheidler <bazsi at balabit.hu> wrote:
> On Mon, 2005-12-26 at 03:14 -0800, Paolo Supino wrote:
> > Hi
> >
> > Here is an update on the interval in writing to the log file:
> > the output of ls -l on the file:
> > -rw-r--r-- 1 root root 6234 Dec 26 08:03 switch-01.log
> > and the last messsege coming in on the NIC (captured by tcpdump):
> > 12:56:57.564348 IP switch-01.1024 > syslog.hot.net.il.syslog: UDP,
> > length 75
> > As you can see the time interval is almost 5 hours... :-(
> >
>
> I can't see how this could happen, log_fifo_size only specifies the
> maximum size of the buffer and does not increase write latency on its
> own.
>
> Does the message arrive to the destination at the end? Because if it
> is
> not then probably it is an unrelated issue. The only thing that
> affects
> write latency is sync()
>
> --
> Bazsi
>
> _______________________________________________
> syslog-ng maillist - syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at
> http://www.campin.net/syslog-ng/faq.html
>
>
__________________________________________
Yahoo! DSL Something to write home about.
Just $16.99/mo. or less.
dsl.yahoo.com
More information about the syslog-ng
mailing list