[syslog-ng] Error parsing conf file?
bazsi at balabit.hu
Thu Jun 30 11:07:51 CEST 2005
On Tue, 2005-06-28 at 09:46 -0600, Zb Indelak wrote:
> Thank you. I downloaded the 20050628 snapshot and the file permission problem goes away. I also collected some more information on the second problem I reported.
> First, the relevant portions of my config file:
> Now the symptoms. I have an application that continuously monitors the
> /var/nsm/inbox/router/cisco/ios/12.0/syslog directory and when a file is
> released in that directory, the application copies it to its working directory
> and removes it from the original directory. The following shows the files
> in the directory when using syslog-ng 1.6.5 and then the same is repeated for
> syslog-ng 1.9.4+20050628. I have also noticed that while version 1.6.5 was
> producing a single file in a directory per minute (and the time stamp corresponded
> to current time), version 1.9.4 produces a number of files and
> the timestamp varies (probably depends on the timestamp received).
There was a problem in use_time_recvd() handling, which I've now fixed.
> *** Problems start here ***
> syslog-ng 1651 root 82w REG 8,8 489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843
> syslog-ng 1651 root 83w REG 8,8 489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843
> [root at simda02 NSM]# ps -ef|grep syslog
> root 1651 1 0 15:36 ? 00:00:01 ./syslog-ng -f /etc/syslog-ng/syslog-ng.conf
> root 1682 1508 0 15:39 pts/2 00:00:00 grep syslog
> [root at simda02 NSM]# kill -9 1651
> [root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
This seems to be an unrelated issue that it opens the same file multiple
times. This is no good. I'll look into this as well.
More information about the syslog-ng