[syslog-ng] Syslog-ng losing messages on solaris 10

AndyH at nominet.org.uk AndyH at nominet.org.uk
Wed Feb 20 15:32:22 CET 2008


Hi,

I've been running 2.0.6 on Solaris 10 and it all seemed to be working fine.
On a new application I have found that it loses messages.  This application
sends 3-7000 messages/sec.  Part of these messages contains a unique ID
which increments.

When I run the syslogd as supplied with Solaris 10 then all messages get
logged, but when I use syslog-ng then it loses messages.  On a Sun V210 I
see these messages

message overflow on /dev/log minor #6 -- is syslogd(1M) running?
message overflow on /dev/log minor #6 -- is syslogd(1M) running?
message overflow on /dev/log minor #6 -- is syslogd(1M) running?

on the console, and eventually there is a hardware reset and the server
reboots.

I have tried running syslogd to just pass messages on to syslog-ng and this
doesn't cause the hardware reset, but still loses some messages.  I have
also tried the time_sleep and log_fetch_limit options with no success.

I have noticed that syslogd is multi-threaded but syslog-ng is only single
threaded.  Is this what is causing these messages to get missed?  Are there
any plans for a threaded version?

Anyone have any ideas as to how to get all messages logged with syslog-ng?

Regards
Andy


More information about the syslog-ng mailing list