[syslog-ng]syslog-ng stopped logging at beginning of month (March 1)

Joerg Michels syslog-ng@lists.balabit.hu
Thu, 3 Mar 2005 09:10:41 +0100


--Signature=_Thu__3_Mar_2005_09_10_41_+0100_A_YYjXvV8RHRQl=M
Content-Type: text/plain; charset=ISO-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

hello,

I have the same problem, when the sending machine has a different locale se=
tting, than the receiving machine. For example: my syslog server has a engl=
ish locale and the sending machine has a german locale. In german the 3 let=
ter short cut for "march" is "M=E4r" (from german M=E4rz)  but the english =
short cut is "Mar". When these strings are different the date based sorting=
 of syslog messages doesn't work correctly. In my case the messages are sor=
ted at 2004-12-31, so the last day of the last year.

Check if you have also a directory <path>/2004/12


J=F6rg



On Wed, 2 Mar 2005 15:49:02 -0500
"Deras, Angel R./Information Systems" <derasa@MSKCC.ORG> wrote:

> Hi Friends,
> =20
> For some reason, syslog-ng did not create a new dir and destination file
> after it closed the last log on February 28 @ 23:59.  It should have
> created a new dir in the form:
> =20
> <path>/2005/03/
> =20
> and a file named "2005-03-01".
> =20
> However, this did not happen and I am still not able to get logging
> going.
> =20
> I am using syslog-ng version 1.6.6, running on FreeBSD 5.3.  I installed
> it recently and it worked great from Feb 17 to Feb 28, each day creating
> that day's file; but it not create the March directory nor any other
> file.
> =20
> tcpdump sessions show that the udp packets to port 514 are arriving at
> the log server.
> =20
> Any help will be greatly appreciated.
> =20
> thanks,
> =20
> ard
> =20
>=20
> =20
>      =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>     =20
>      Please note that this e-mail and any files transmitted with it may b=
e=20
>      privileged, confidential, and protected from disclosure under=20
>      applicable law. If the reader of this message is not the intended=20
>      recipient, or an employee or agent responsible for delivering this=20
>      message to the intended recipient, you are hereby notified that any=
=20
>      reading, dissemination, distribution, copying, or other use of this=
=20
>      communication or any of its attachments is strictly prohibited.  If=
=20
>      you have received this communication in error, please notify the=20
>      sender immediately by replying to this message and deleting this=20
>      message, any attachments, and all copies and backups from your=20
>      computer.
>=20


--=20
Joerg Michels        =20
                               =20
teamnet GmbH            Voice  +49 5251 879293 30=20
Technologiepark 20      Fax    +49 5251 879293 99
D-33100 Paderborn       EMail  michels@teamnet.de

--Signature=_Thu__3_Mar_2005_09_10_41_+0100_A_YYjXvV8RHRQl=M
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFCJsaMLd9HLvpqlLIRAmxhAJ9tYqqzeXTMlc/daqhSBj3tpMVM3wCfd2jZ
hZuMigJaeLkON9DgUYWbrns=
=r76R
-----END PGP SIGNATURE-----

--Signature=_Thu__3_Mar_2005_09_10_41_+0100_A_YYjXvV8RHRQl=M--