[syslog-ng] Error parsing conf file?
Balazs Scheidler
bazsi at balabit.hu
Thu Jun 30 11:07:51 CEST 2005
On Tue, 2005-06-28 at 09:46 -0600, Zb Indelak wrote:
> Thank you. I downloaded the 20050628 snapshot and the file permission problem goes away. I also collected some more information on the second problem I reported.
>
> First, the relevant portions of my config file:
>
> Now the symptoms. I have an application that continuously monitors the
> /var/nsm/inbox/router/cisco/ios/12.0/syslog directory and when a file is
> released in that directory, the application copies it to its working directory
> and removes it from the original directory. The following shows the files
> in the directory when using syslog-ng 1.6.5 and then the same is repeated for
> syslog-ng 1.9.4+20050628. I have also noticed that while version 1.6.5 was
> producing a single file in a directory per minute (and the time stamp corresponded
> to current time), version 1.9.4 produces a number of files and
> the timestamp varies (probably depends on the timestamp received).
There was a problem in use_time_recvd() handling, which I've now fixed.
> *** Problems start here ***
> syslog-ng 1651 root 82w REG 8,8 489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843
> syslog-ng 1651 root 83w REG 8,8 489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843
> [root at simda02 NSM]# ps -ef|grep syslog
> root 1651 1 0 15:36 ? 00:00:01 ./syslog-ng -f /etc/syslog-ng/syslog-ng.conf
> root 1682 1508 0 15:39 pts/2 00:00:00 grep syslog
> [root at simda02 NSM]# kill -9 1651
> [root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
>
This seems to be an unrelated issue that it opens the same file multiple
times. This is no good. I'll look into this as well.
--
Bazsi
More information about the syslog-ng
mailing list