[syslog-ng] SEC and syslog-ng - stop the SEC process

[Clayton Dukes]

Nope, it's not cleaning up the child.
(or am I doing something wrong?)

so, to reiterate, when I stop syslog-ng I want it to stop the child
sec proces(es).


On Sun, Jul 12, 2009 at 1:11 PM, Martin Holste<mcholste at gmail.com> wrote:
> If you manually kill sec (or perl with pid 28202 in the output below)
> with pkill or kill, Syslog-ng will startup another to replace it, so
> you would need some sort of lockfile added to sec.pl for the perl
> script to bail out on early if you want to have Syslog-ng continue to
> run without sec.  Syslog-ng will kill (or TERM, to be precise) all
> child processes when you send it a TERM signal, so it should clean up
> after itself.
>
> --Martin
>
> On Sun, Jul 12, 2009 at 11:41 AM, Clayton Dukes<cdukes at gmail.com> wrote:
>> Hi,
>> Not sure if I should ask this here or in the SEC forum...
>> Does anyone know how to stop an sec process that's called from syslog-ng?
>>
>> i.e: when I issue an /etc/init.d/syslog-ng stop
>>
>> I still have the following running:
>> root     28202     1  1    12:34 pts/1       00:00:00 /usr/bin/perl -w ...
>> root     28207 28202  0 12:34 pts/1    00:00:00 sh -c /usr/bin/tail -F
>> /tmp/sec.log ...
>> root     28208 28207  0 12:34 pts/1    00:00:00 /usr/bin/tail -F /tmp/sec.log
>> root     28209 28202  0 12:34 pts/1    00:00:00 sh -c /usr/bin/tail -F
>> /tmp/sec_reactive.log...
>> root     28210 28209  0 12:34 pts/1    00:00:00 /usr/bin/tail -F...
>>
>> Here's my syslog-ng config:
>> destination d_sec {
>>   program("/www/svn/php-syslog-ng/scripts/sec/sec.pl -input=\"-\"
>> -conf=/www/svn/php-syslog-ng/scripts/sec/001_proactive.conf
>> -conf=/www/svn/php-syslog-ng/scripts/sec/002_reactive.conf
>> -log=/var/log/php-syslog-ng/sec_run.log -intevents"
>>   template("$HOST\t$FACILITY\t$PRIORITY\t$LEVEL\t$TAG\t$YEAR-$MONTH-$DAY\t$HOUR:$MIN:$SEC\t$PROGRAM\t$MSG\n")
>>   );
>> };
>> # Tell syslog-ng to log to our new destination
>> log {
>>   source(s_all);
>>   destination(d_sec);
>> };
>>
>>
>> --
>> ______________________________________________________________
>>
>> Clayton Dukes
>> ______________________________________________________________
>> ______________________________________________________________________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
>> FAQ: http://www.campin.net/syslog-ng/faq.html
>>
>>
>



-- 
______________________________________________________________

Clayton Dukes
______________________________________________________________