[syslog-ng] line of sendmail log output missing?

[Centyx Centalix]

On 04May2007 03:39PM (+0100), Geller, Sandor (IT) wrote:
> Hi, if you suspect a facility/severity problem then using a fallback log
> at the end of the configuration might help you, like this:
> 
> log {
>         source(s_all);
>         destination(d_fallback);
>         flags(fallback);
> };
> 
> Syslog-ng can cache log messages in memory so it might be the case that
> the logs gets written with a small delay. Without seeing your actual
> configuration it's hard to help you further.. Sendmail isn't modular so
> when an openlog was successful (and it was because you see messages from
> sendmail) then you're unlikely to hit any log socket connection number
> limits which sometimes happen - but this will get logged by syslog-ng
> if you use the internal() source.
> 
> Regards,
> 
> Sandor
> 

Thanks. I'm not seeing anything in the fallback log at all. I'm also not
seeing any errors or dropped messages in syslog-ng's log output.
Attached is my syslog-ng.conf. Perhaps you may spy something there.

-------------- next part --------------
# configuration file for syslog-ng, customized for remote logging

options {
	check_hostname(yes);
	keep_hostname(yes);
	chain_hostnames(no);
};

source self {
	internal();
};

source inputs { 
	unix-dgram("/dev/log");
	unix-dgram("/home/virtual/FILESYSTEMTEMPLATE/log-");
	file("/proc/kmsg");
	#udp(ip(127.0.0.1));
	#tcp(port(1111) max_connections(100));
};
		
# Local filters
filter f_messages { level(info..emerg); };
filter f_secure { facility(authpriv); };
filter f_mail { level(info..emerg) and facility(mail); };
filter f_cron { facility(cron); };
filter f_emerg { level(emerg); };
filter f_spooler { level(crit..emerg) and facility(uucp, news); };
filter f_local7 { facility(local7); };
filter f_local1 { facility(local1); };
filter f_local2 { facility(local2); };
filter f_local3 { facility(local3); };

# Local destinations
destination d_self {
	file("/var/log/syslog-ng" owner("root") group("root") perm(0640));
};

destination d_messages {
	file("/var/log/messages" owner("root") group("root") perm(0640) dir_perm(0750) create_dirs(yes));
};
destination d_secure {
	file("/var/log/secure" owner("root") group("root") perm(0640) dir_perm(0750) create_dirs(yes));
};
destination d_maillog {
	file("/var/log/maillog" owner("root") group("root") perm(0640) dir_perm(0750) create_dirs(yes));
};
destination d_cron {
	file("/var/log/cron" owner("root") group("root") perm(0640) dir_perm(0750) create_dirs(yes));
};
destination d_spooler {
	file("/var/log/spooler" owner("root") group("root") perm(0640) dir_perm(0750) create_dirs(yes));
};
destination d_bootlog {
	file("/var/log/bootlog" owner("root") group("root") perm(0640) dir_perm(0750) create_dirs(yes));
};
destination d_appl {
	file("/var/log/appliance/ensim_appliance.log" owner("root") group("root") perm(0640) dir_perm(0750) create_dirs(yes));
};
destination d_applset {
	file("/var/log/appliance/setup.log" owner("root") group("root") perm(0640) dir_perm(0750) create_dirs(yes));
};
destination d_applseterr {
	file("/var/log/appliance/setup.err" owner("root") group("root") perm(0640) dir_perm(0750) create_dirs(yes));
};
destination d_console { usertty("root"); };

# Local logs - order DOES matter !
log { source(self); destination(d_self); };
log { source(inputs); filter(f_emerg); destination(d_console); };
log { source(inputs); filter(f_secure); destination(d_secure); };
log { source(inputs); filter(f_mail); destination(d_maillog); };
log { source(inputs); filter(f_cron); destination(d_cron); };
log { source(inputs); filter(f_spooler); destination(d_spooler); };
log { source(inputs); filter(f_local1); destination(d_appl); };
log { source(inputs); filter(f_local2); destination(d_applset); };
log { source(inputs); filter(f_local3); destination(d_applseterr); };
log { source(inputs); filter(f_local7); destination(d_bootlog); };
log { source(inputs); filter(f_messages); destination(d_messages); };

# Remote destinations
destination d_loghost { tcp("localhost" port(1111)); };

# Remote logs
log { source(inputs); destination(d_loghost); };

# fallback
destination d_fallback { file(/var/log/syslog); };

log { source(inputs); destination(d_fallback); flags(fallback); };