[syslog-ng] Antw: Re: Syslog-ng sometime dies at 04:02
Peter Michael Calum
pemca at tdc.dk
Tue Feb 19 17:10:23 CET 2008
Hi Martin,
Found it ! - And changed to a stop / start sequence
Then we will se tomorrow..
Thanks,
rgds,
Peter
-----Oprindelig meddelelse-----
Fra: syslog-ng-bounces at lists.balabit.hu [mailto:syslog-ng-bounces at lists.balabit.hu] På vegne af Martin Voelker
Sendt: 19. februar 2008 16:57
Til: Syslog-ng users' and developers' mailing list
Emne: Re: [syslog-ng] Antw: Re: Syslog-ng sometime dies at 04:02
Hi Peter,
I think its the Script in /etc/logrotate.d
In this Directory there its an Script syslog-ng
In /etc/cron.daily there is the logrotate
Logrotate ist for rotating logs.
rgds
Martin
>>> "Peter Michael Calum" <pemca at tdc.dk> 19.02.2008 16:46:06 >>>
Hi
Can you tell me which script in the /etc/cron.daily/ who starts this
reload configuration ?
I have a suspicion that it is : 0logwatch ->
/usr/share/logwatch/scripts/logwatch.pl
rgds,
Peter
-----Oprindelig meddelelse-----
Fra: syslog-ng-bounces at lists.balabit.hu
[mailto:syslog-ng-bounces at lists.balabit.hu] På vegne af Martin
Voelker
Sendt: 19. februar 2008 16:41
Til: Syslog-ng users' and developers' mailing list
Emne: [syslog-ng] Antw: Re: Syslog-ng sometime dies at 04:02
Hi
I can remember the same Problem. I just restart syslog-ng instead of
reload
rgds
martin
>>> "Peter Michael Calum" <pemca at tdc.dk> 19.02.2008 16:36:48 >>>
Hi
I'm new to syslog, and i just used the samples from php-syslog-ng
to get the data into the mysql database. - and that works fine.
i get no errors when i stop / start syslog-ng only if i reload
the configuration.
rgds,
Peter
-----Oprindelig meddelelse-----
Fra: syslog-ng-bounces at lists.balabit.hu
[mailto:syslog-ng-bounces at lists.balabit.hu] På vegne af Geller,
Sandor (IT)
Sendt: 19. februar 2008 16:29
Til: Syslog-ng users' and developers' mailing list
Emne: Re: [syslog-ng] Syslog-ng sometime dies at 04:02
Hi,
To be honest I don't understand your configuration, but the
error message shows the problem (what I don't understand why
does actually syslog-ng start with this configuration).
You're actually using the same sources at two places, I'd
eliminate the s_everything source completely.
Regards,
Sandor
> -----Original Message-----
> From: syslog-ng-bounces at lists.balabit.hu
> [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of
> Peter Michael Calum
> Sent: Tuesday, February 19, 2008 4:05 PM
> To: syslog-ng at lists.balabit.hu
> Subject: [syslog-ng] Syslog-ng sometime dies at 04:02
>
> Hi
>
> I have installed syslog-ng on RHEL 5 as an RPM
> (syslog-ng-2.0.8-1.fc8.i386.rpm).
>
> It runs fine except for this problem :
>
> Every night at 04:02 som script runs and make a reload of the
> configuration. This comes out
> with some errors in the messages file, but the real problem
> is, that syslog-ng sometime stops
> running at this time.
>
> I'm running syslog-ng together with php-syslog-ng
>
>
> Hope anyone can help
>
> rgds,
> Peter Calum
> Denmark
>
>
> Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]:
> Configuration reload request received, reloading configuration;
> Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]: Internal
> error, duplicate configuration elements refer to the same
> persistent config;
> name='afsocket_sd_connections(stream,AF_UNIX(/dev/log))'
>
> Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]: Internal
> error, duplicate configuration elements refer to the same
> persistent config;
> name='afsocket_sd_connections(dgram,AF_INET(0.0.0.0:514))'
>
> Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]:
> Configuration reload request received, reloading configuration;
> Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]: Internal
> error, duplicate configuration elements refer to the same
> persistent config;
> name='afsocket_sd_listen_fd(stream,AF_UNIX(/dev/log))'
>
> Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]:
> Configuration reload request received, reloading configuration;
> Feb 19 04:02:04 s_sys at khk9dsg5 syslog-ng[21702]: Internal
> error, duplicate configuration elements refer to the same
> persistent config;
> name='afsocket_sd_listen_fd(stream,AF_UNIX(/dev/log))'
>
> My configuration file :
>
> options {
> sync (0);
> chain_hostnames(on);
> stats(43200);
> time_reopen (10);
> log_fifo_size (1000);
> long_hostnames (on);
> use_dns (yes);
> use_fqdn (no);
> create_dirs (no);
> keep_hostname (yes);
> };
>
> source s_sys {
> file ("/proc/kmsg" log_prefix("kernel: "));
> unix-stream ("/dev/log");
> internal();
> udp(ip(0.0.0.0) port(514));
> tcp(ip(0.0.0.0) port(514));
> };
>
> source s_everything { internal(); pipe("/proc/kmsg");
> unix-stream("/dev/log"); udp(); };
>
>
> destination d_cons { file("/dev/console"); };
> destination d_mesg { file("/var/log/messages"); };
> destination d_auth { file("/var/log/secure"); };
> destination d_mail { file("/var/log/maillog" sync(10)); };
> destination d_spol { file("/var/log/spooler"); };
> destination d_boot { file("/var/log/boot.log"); };
> destination d_cron { file("/var/log/cron"); };
> destination d_mlal { usertty("*"); };
>
> destination d_mysql {
> program("/usr/bin/mysql -usyslogadmin -psyslogadmin syslog"
> template("INSERT INTO logs (host, facility, priority,
> level, tag, datetime, program, msg)
> VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL',
> '$TAG', '$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC','$PROGRAM', '$MSG'
);\n")
>
> template-escape(yes));
> };
>
> log {
> source(s_everything);
> destination(d_mysql);
> };
>
>
> filter f_filter1 { facility(kern); };
> filter f_filter2 { level(info..emerg) and
> not facility(mail,authpriv,cron); };
> filter f_filter3 { facility(authpriv); };
> filter f_filter4 { facility(mail); };
> filter f_filter5 { level(emerg); };
> filter f_filter6 { facility(uucp) or
> (facility(news) and level(crit..emerg)); };
> filter f_filter7 { facility(local7); };
> filter f_filter8 { facility(cron); };
>
> log { source(s_sys); filter(f_filter1); destination(d_cons); };
> log { source(s_sys); filter(f_filter2); destination(d_mesg); };
> log { source(s_sys); filter(f_filter3); destination(d_auth); };
> log { source(s_sys); filter(f_filter4); destination(d_mail); };
> log { source(s_sys); filter(f_filter5); destination(d_mlal); };
> log { source(s_sys); filter(f_filter6); destination(d_spol); };
> log { source(s_sys); filter(f_filter7); destination(d_boot); };
> log { source(s_sys); filter(f_filter8); destination(d_cron); };
>
> # vim:set ai ts=4 sw=4 sts=4 et:
>
>
>
>
>
>
>
>
--------------------------------------------------------
NOTICE: If received in error, please destroy and notify sender. Sender
does not intend to waive confidentiality or privilege. Use of this
email
is prohibited when received in error.
_______________________________________________
syslog-ng maillist - syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
_______________________________________________
syslog-ng maillist - syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
Westdeutsche Lotterie GmbH & Co. OHG | Sitz: Münster
Registergericht: Amtsgericht Münster
Handelsregister: Münster HRA 4379
Geschäftsführer: Dr. Winfried Wortmann
Vorsitzender des Beirates: Ernst Gerlach
Gesellschafter:
Nordwestlotto in Nordrhein-Westfalen GmbH | Sitz: Münster
Registergericht: Amtsgericht Münster
Handelsregister: HRB 3840
Geschäftsführer: Dr. Winfried Wortmann
NRW.BANK | Sitz: Düsseldorf und Münster
Rechtsform: Anstalt des öffentlichen Rechts
Registergerichte: Amtsgerichte Düsseldorf/Münster
Handelsregister: Düsseldorf HRA 15277/Münster HRA 5300
_______________________________________________
syslog-ng maillist - syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
_______________________________________________
syslog-ng maillist - syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
_______________________________________________
syslog-ng maillist - syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
More information about the syslog-ng
mailing list