[syslog-ng] syslog-ng 1.6.8 and dns cache issue

[Valdis.Kletnieks at vt.edu]

On Fri, 30 Sep 2005 15:33:27 EDT, Ketan Vankawala said:
> I have currently installed Syslog-ng ver 1.6.8. Here is a snippet of my
> syslog-ng config file.So accordingly when a syslog message comes in, 
> depending on the ip address, it does a lookup in /etc/hosts, creates an 
> appropriate host name folder and forwards the message there. If the 
> hostname does not exists, it creates a folder named with the ip address. 

Updating /etc/hosts *should* provide fast response.  I'm wondering if your
/etc/nsswitch.conf specifies 'hosts: NIS files dns', and the NIS query functions
are being too clever about caching..
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20051001/3c144d28/attachment.pgp