[syslog-ng] Message loss (probably) within syslog-ng

Mike mike at jeke.fdns.net
Sun Mar 5 21:12:11 CET 2006

On Sun, 5 Mar 2006, Vincent Haverlant wrote:

> Hi,
> I get a kind of message loss trouble like in some previous message with the 
> subject "remote logging not reliable", but in his case, the remote logging 
> was done other tcp and this was pointed as the probable cause of message 
> loss. In my case only udp is involved.

is your OS dropping packets before syslog-ng gets a chance to grab them?

maybe run this command:

netstat -su

and look for dropped packets.

if you see some, then you can increase your UDP buffer size to help smooth 
this out in the case of bursts.


More information about the syslog-ng mailing list