[syslog-ng] Run 2 syslog-ng by defferent configurations

Takenaka Kazuhiro takenaka.kazuhiro at oss.ntt.co.jp
Fri Dec 28 07:41:37 CET 2007


Hi Evan.

I tryed the 1st configurration you advised,
and got a pretty good result.

Thanks much.

> We do this all of the time.
> The only thing to ensure is that the "high availablity" instance does not
> open /dev/log or /proc/kmsg. You will have to get the "system" instance that
> is reading /dev/log and /proc/kmsg to send its logs through to the High Availablity
> instance. We do this in different ways for different purposes. Choose only one.
> 
> 1. Have the high availability read messages from localhost:someport
>     where someport is NOT 514. Then have the system instance have a
>     TCP destination of localhost:someport
> 
> 2. Have the high availablity read message from a pipe that has been
>     setup with mkfifo prior to starting the instance.
>     Then have the system instance write to the pipe as one of its outputs.
> 
> That should take care of it.
> 
> Evan.
-- 
Takenaka Kazuhiro <takenaka.kazuhiro at oss.ntt.co.jp>
NTT OSS Center


More information about the syslog-ng mailing list