[syslog-ng] SEC and syslog-ng - stop the SEC process
Clayton Dukes
cdukes at gmail.com
Sun Jul 12 18:41:10 CEST 2009
Hi,
Not sure if I should ask this here or in the SEC forum...
Does anyone know how to stop an sec process that's called from syslog-ng?
i.e: when I issue an /etc/init.d/syslog-ng stop
I still have the following running:
root 28202 1 1 12:34 pts/1 00:00:00 /usr/bin/perl -w ...
root 28207 28202 0 12:34 pts/1 00:00:00 sh -c /usr/bin/tail -F
/tmp/sec.log ...
root 28208 28207 0 12:34 pts/1 00:00:00 /usr/bin/tail -F /tmp/sec.log
root 28209 28202 0 12:34 pts/1 00:00:00 sh -c /usr/bin/tail -F
/tmp/sec_reactive.log...
root 28210 28209 0 12:34 pts/1 00:00:00 /usr/bin/tail -F...
Here's my syslog-ng config:
destination d_sec {
program("/www/svn/php-syslog-ng/scripts/sec/sec.pl -input=\"-\"
-conf=/www/svn/php-syslog-ng/scripts/sec/001_proactive.conf
-conf=/www/svn/php-syslog-ng/scripts/sec/002_reactive.conf
-log=/var/log/php-syslog-ng/sec_run.log -intevents"
template("$HOST\t$FACILITY\t$PRIORITY\t$LEVEL\t$TAG\t$YEAR-$MONTH-$DAY\t$HOUR:$MIN:$SEC\t$PROGRAM\t$MSG\n")
);
};
# Tell syslog-ng to log to our new destination
log {
source(s_all);
destination(d_sec);
};
--
______________________________________________________________
Clayton Dukes
______________________________________________________________
More information about the syslog-ng
mailing list