[syslog-ng]Logs lost in the FIFO
Balazs Scheidler
syslog-ng@lists.balabit.hu
Mon, 28 Feb 2005 09:53:16 +0100
On Mon, 2005-02-28 at 01:14 -0500, Jay Guerette wrote:
> They're dropped, lost, unrecoverable. There really is nothing else
> syslog-ng could do in those situations.
>
> If your data is that important (and who logs un-important stuff,
> anyway?) you should write it to a log file, and the parse it from
> there; that way, if your parser dies, you don't lose any data.
This is not necessarily true for syslog-ng 1.9.x where you can specify
flags(flow-control) for log statements which means to stop writing
instead of dropping messages.
--
Bazsi