[syslog-ng] Troubleshooting local5.* output

Geller, Sandor (IT) Sandor.Geller at morganstanley.com
Mon Mar 17 22:48:03 CET 2008


> >  So, maybe someone can help me.  How do I find out how this java
> >  process is writing to the log file, and why are messages not being
> >  forwarded to the remote host?  lsof shows that the only 
> process that
> >  has the /var/log/mylogfile.log open is the syslog daemon.
> My problem is probably due to a syslog or java configuration setting
> but was hoping one of you could point me in the right direction.
> The java process is writing to /var/log/mylogfile.log, and it is using
> the local5 facility to do so.  This log file is not written to at all
> if I take this line out of syslog.conf:
> local5.*     /var/log/mylogfile.log
> I just can't figure out why log messages are not forwarded to the
> remote syslog-ng host.  Anyone have an idea how to troubleshoot this?

I don't have the faintest idea what is happening on your clients :((
Could you provide more details about your client hosts? For example
what OS are you using, what version of syslogd is running and how does
a sample log message look like?



NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.

More information about the syslog-ng mailing list