[syslog-ng] Connection broke using remote syslog-ng clients
e.lesouef at crbn.fr
Mon Nov 5 09:48:31 CET 2007
Thanks. This seems to be a spooled warning from remote syslog-ng client
sent when the connection was re-established.
Le mercredi 31 octobre 2007 à 10:04 -0700, Evan Rempel a écrit :
> The first two lines are expected from a TCP connected client when the destination
> (central server) is restarted or reloaded.
> The client machine should then easily be able to reconnect, and I would not expect
> the "Connection failed;..." message, however, I note that you indicate that you are seeing these
> messages on the central server, so the connection must have been established again in order to
> get the messages to the central server.
> What you are describing will occur if your "restart" of the central log server is implemented
> do something with log files (like rotating which is unnecessary)
> where the "do something" takes longer than 10 seconds, but less than 20 seconds.
> LESOUEF Emmanuel wrote:
> > Hello,
> > I'm getting this kind of logs (facility syslog) on my central syslog-ng server :
> > Oct 31 12:08:10 lxnetmgmt syslog-ng: EOF occurred while idle; fd='6'
> > Oct 31 12:08:10 lxnetmgmt syslog-ng: Connection broken; time_reopen='10'
> > Oct 31 12:08:20 lxnetmgmt syslog-ng: Connection failed; error='Connection refused (111)', time_reopen='10'
> > It occurs after restarting the central syslog-ng server. These messages come from remote hosts sending their logs via tcp to the central syslog-ng server.
> > Any idea ?
> > Thanks for your help.
> > --
> > Emmanuel Lesouef
> > DSI | CRBN
> > t : 0231069671
> > m : e.lesouef at crbn.fr
> > _______________________________________________
> > syslog-ng maillist - syslog-ng at lists.balabit.hu
> > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
DSI | CRBN
e: e.lesouef at crbn.fr
More information about the syslog-ng