[syslog-ng]syslog-ng stopped logging at beginning of month (March 1)
Deras, Angel R./Information Systems
syslog-ng@lists.balabit.hu
Wed, 2 Mar 2005 15:49:02 -0500
This is a multi-part message in MIME format.
------_=_NextPart_001_01C51F69.4409C3D8
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Hi Friends,
=20
=46or some reason, syslog-ng did not create a new dir and destination file
after it closed the last log on February 28 @ 23:59. It should have
created a new dir in the form:
=20
<path>/2005/03/
=20
and a file named "2005-03-01".
=20
However, this did not happen and I am still not able to get logging
going.
=20
I am using syslog-ng version 1.6.6, running on FreeBSD 5.3. I installed
it recently and it worked great from Feb 17 to Feb 28, each day creating
that day's file; but it not create the March directory nor any other
=66ile.
=20
tcpdump sessions show that the udp packets to port 514 are arriving at
the log server.
=20
Any help will be greatly appreciated.
=20
thanks,
=20
ard
=20
=20
=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
=20
Please note that this e-mail and any files transmitted with it may be=
=20
privileged, confidential, and protected from disclosure under=20
applicable law. If the reader of this message is not the intended=20
recipient, or an employee or agent responsible for delivering this=20
message to the intended recipient, you are hereby notified that any=20
reading, dissemination, distribution, copying, or other use of this=20
communication or any of its attachments is strictly prohibited. If=20
you have received this communication in error, please notify the=20
sender immediately by replying to this message and deleting this=20
message, any attachments, and all copies and backups from your=20
computer.
------_=_NextPart_001_01C51F69.4409C3D8
Content-Type: text/html;
charset=us-ascii
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Message</TITLE>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2900.2604" name=3DGENERATOR></HEAD>
<BODY>
<DIV><SPAN class=3D068043620-02032005><FONT face=3DArial size=3D2>Hi=20
=46riends,</FONT></SPAN></DIV>
<DIV><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D068043620-02032005><FONT face=3DArial size=3D2>For some =
reason,=20
syslog-ng did not create a new dir and destination file after it closed the=
=
last=20
log on February 28 @ 23:59. It should have created a new dir in =
the=20
=66orm:</FONT></SPAN></DIV>
<DIV><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2><path>/2005/03/</FONT></SPAN></DIV>
<DIV class=3DSection1><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial =
size=3D2>and a=20
=66ile named "2005-03-01".</FONT></SPAN></DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2>However, this did not happen and I am still not able to get loggin=
g=
=20
going.</FONT></SPAN></DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial =
size=3D2>I am=20
using syslog-ng version 1.6.6, running on FreeBSD 5.3. I installed it=
=20
recently and it worked great from Feb 17 to Feb 28, each day creating that =
day's=20
=66ile; but it not create the March directory nor any other=20
=66ile.</FONT></SPAN></DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2>tcpdump sessions show that the udp packets to port 514 are arrivin=
g=
at=20
the log server.</FONT></SPAN></DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial =
size=3D2>Any=20
help will be greatly appreciated.</FONT></SPAN></DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2>thanks,</FONT></SPAN></DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2>ard</FONT></SPAN></DIV>
<DIV class=3DSection1><SPAN class=3D068043620-02032005><FONT face=3DArial=20
size=3D2></FONT></SPAN> </DIV></BODY></HTML>
<P> <br>
=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br>
<br>
Please note that this e-mail and any files transmitted with it may be =
<br>
privileged, confidential, and protected from disclosure under <br>
applicable law. If the reader of this message is not the intended <br>
recipient, or an employee or agent responsible for delivering this <br>
message to the intended recipient, you are hereby notified that any =
<br>
reading, dissemination, distribution, copying, or other use of this =
<br>
communication or any of its attachments is strictly prohibited. If =
<br>
you have received this communication in error, please notify the <br>
sender immediately by replying to this message and deleting this <br>
message, any attachments, and all copies and backups from your <br>
computer.<br>
</P>
------_=_NextPart_001_01C51F69.4409C3D8--