[syslog-ng] SEC and syslog-ng - stop the SEC process

Clayton Dukes cdukes at gmail.com
Sun Jul 12 18:41:10 CEST 2009


Hi,
Not sure if I should ask this here or in the SEC forum...
Does anyone know how to stop an sec process that's called from syslog-ng?

i.e: when I issue an /etc/init.d/syslog-ng stop

I still have the following running:
root     28202     1  1    12:34 pts/1       00:00:00 /usr/bin/perl -w ...
root     28207 28202  0 12:34 pts/1    00:00:00 sh -c /usr/bin/tail -F
/tmp/sec.log ...
root     28208 28207  0 12:34 pts/1    00:00:00 /usr/bin/tail -F /tmp/sec.log
root     28209 28202  0 12:34 pts/1    00:00:00 sh -c /usr/bin/tail -F
/tmp/sec_reactive.log...
root     28210 28209  0 12:34 pts/1    00:00:00 /usr/bin/tail -F...

Here's my syslog-ng config:
destination d_sec {
   program("/www/svn/php-syslog-ng/scripts/sec/sec.pl -input=\"-\"
-conf=/www/svn/php-syslog-ng/scripts/sec/001_proactive.conf
-conf=/www/svn/php-syslog-ng/scripts/sec/002_reactive.conf
-log=/var/log/php-syslog-ng/sec_run.log -intevents"
   template("$HOST\t$FACILITY\t$PRIORITY\t$LEVEL\t$TAG\t$YEAR-$MONTH-$DAY\t$HOUR:$MIN:$SEC\t$PROGRAM\t$MSG\n")
   );
};
# Tell syslog-ng to log to our new destination
log {
   source(s_all);
   destination(d_sec);
};


-- 
______________________________________________________________

Clayton Dukes
______________________________________________________________


More information about the syslog-ng mailing list