[syslog-ng] Error parsing conf file?

Balazs Scheidler bazsi at balabit.hu
Thu Jun 30 11:07:51 CEST 2005


On Tue, 2005-06-28 at 09:46 -0600, Zb Indelak wrote:
> Thank you.  I downloaded the 20050628 snapshot and the file permission problem goes away.  I also collected some more information on the second problem I reported.
> 
> First, the relevant portions of my config file:
> 

> Now the symptoms.  I have an application that continuously monitors the 
> /var/nsm/inbox/router/cisco/ios/12.0/syslog directory and when a file is 
> released in that directory, the application copies it to its working directory
>  and removes it from the original directory.  The following shows the files
> in the directory when using syslog-ng 1.6.5 and then the same is repeated for 
> syslog-ng 1.9.4+20050628.  I have also noticed that while version 1.6.5 was 
> producing a single file in a directory per minute (and the time stamp corresponded
>  to current time), version 1.9.4 produces a number of files and
> the timestamp varies (probably depends on the timestamp received).

There was a problem in use_time_recvd() handling, which I've now fixed.


> *** Problems start here ***
> syslog-ng 1651 root   82w   REG    8,8    489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843
> syslog-ng 1651 root   83w   REG    8,8    489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843
> [root at simda02 NSM]# ps -ef|grep syslog
> root      1651     1  0 15:36 ?        00:00:01 ./syslog-ng -f /etc/syslog-ng/syslog-ng.conf
> root      1682  1508  0 15:39 pts/2    00:00:00 grep syslog
> [root at simda02 NSM]# kill -9 1651
> [root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
> 

This seems to be an unrelated issue that it opens the same file multiple
times. This is no good. I'll look into this as well.

-- 
Bazsi



More information about the syslog-ng mailing list