[syslog-ng]Logs lost in the FIFO
Jay Guerette
syslog-ng@lists.balabit.hu
Mon, 28 Feb 2005 21:15:44 -0500
While a nice feature, this will only help in those cases where the
source stream is managed. In traditional send-and-forget-udp syslog,
this would not help the risk of data loss when the destination is a
FIFO.
On Mon, 28 Feb 2005 17:08:24 +0100, Balazs Scheidler <bazsi@balabit.hu> wrote:
> > How exactly does that work? You can only "stop writing" for so long,
> > before a buffer fills up and you have to drop messages...
>
> Simple: syslog-ng stops reading. if you have flow-controlled sources
> (e.g. unix-stream, or TCP with the other end doing flow control as well)
> then at the end the application will block on sending the message.
>
> > > > They're dropped, lost, unrecoverable. There really is nothing else
> > > > syslog-ng could do in those situations.