[syslog-ng] Syslog-ng sometime dies at 04:02

[Peter Michael Calum]

Hi

I have installed syslog-ng on RHEL 5 as an RPM
(syslog-ng-2.0.8-1.fc8.i386.rpm).

It runs fine except for this problem :

Every night at 04:02 som script runs and make a reload of the
configuration. This comes out
with some errors in the messages file, but the real problem is, that
syslog-ng sometime stops
running at this time.

I'm running syslog-ng together with php-syslog-ng


Hope anyone can help

rgds,
Peter Calum
Denmark


Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]: Configuration reload
request received, reloading configuration; 
Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]: Internal error,
duplicate configuration elements refer to the same persistent config;
name='afsocket_sd_connections(stream,AF_UNIX(/dev/log))'
Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]: Internal error,
duplicate configuration elements refer to the same persistent config;
name='afsocket_sd_connections(dgram,AF_INET(0.0.0.0:514))'
Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]: Configuration reload
request received, reloading configuration; 
Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]: Internal error,
duplicate configuration elements refer to the same persistent config;
name='afsocket_sd_listen_fd(stream,AF_UNIX(/dev/log))'
Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]: Configuration reload
request received, reloading configuration; 
Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]: Internal error,
duplicate configuration elements refer to the same persistent config;
name='afsocket_sd_listen_fd(stream,AF_UNIX(/dev/log))'

My configuration file :

options {
    sync (0);
    chain_hostnames(on);
    stats(43200);
    time_reopen (10);
    log_fifo_size (1000);
    long_hostnames (on);
    use_dns (yes);
    use_fqdn (no);
    create_dirs (no);
    keep_hostname (yes);
};

source s_sys {
    file ("/proc/kmsg" log_prefix("kernel: "));
    unix-stream ("/dev/log");
    internal();
    udp(ip(0.0.0.0) port(514));
    tcp(ip(0.0.0.0) port(514));
};

source s_everything { internal(); pipe("/proc/kmsg");
unix-stream("/dev/log"); udp(); };


destination d_cons { file("/dev/console"); };
destination d_mesg { file("/var/log/messages"); };
destination d_auth { file("/var/log/secure"); };
destination d_mail { file("/var/log/maillog" sync(10)); };
destination d_spol { file("/var/log/spooler"); };
destination d_boot { file("/var/log/boot.log"); };
destination d_cron { file("/var/log/cron"); };
destination d_mlal { usertty("*"); };

destination d_mysql {
    program("/usr/bin/mysql -usyslogadmin -psyslogadmin syslog"
    template("INSERT INTO logs (host, facility, priority, level, tag,
datetime, program, msg)
    VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL', '$TAG',
'$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC','$PROGRAM', '$MSG' );\n")
    template-escape(yes));
    };

log {
    source(s_everything);
    destination(d_mysql);
    };


filter f_filter1   { facility(kern); };
filter f_filter2   { level(info..emerg) and
                     not facility(mail,authpriv,cron); };
filter f_filter3   { facility(authpriv); };
filter f_filter4   { facility(mail); };
filter f_filter5   { level(emerg); };
filter f_filter6   { facility(uucp) or
                     (facility(news) and level(crit..emerg)); };
filter f_filter7   { facility(local7); };
filter f_filter8   { facility(cron); };

log { source(s_sys); filter(f_filter1); destination(d_cons); };
log { source(s_sys); filter(f_filter2); destination(d_mesg); };
log { source(s_sys); filter(f_filter3); destination(d_auth); };
log { source(s_sys); filter(f_filter4); destination(d_mail); };
log { source(s_sys); filter(f_filter5); destination(d_mlal); };
log { source(s_sys); filter(f_filter6); destination(d_spol); };
log { source(s_sys); filter(f_filter7); destination(d_boot); };
log { source(s_sys); filter(f_filter8); destination(d_cron); };

# vim:set ai ts=4 sw=4 sts=4 et:







-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20080219/7d31d049/attachment.htm