[syslog-ng] loosing Messages via Modem (GPRS/UMTS) connection
Balazs Scheidler
bazsi at balabit.hu
Thu Mar 12 16:02:13 CET 2009
On Thu, 2009-03-12 at 00:32 +0100, Jens-Peter C. Hillers wrote:
> Hi,
>
> I try to log to a remote Syslog Server via:
>
> destination logserver { tcp("log.mydomain.xyz" port(514) flush_lines(1)
> flush_timeout(10) keep-alive(yes) ); };
>
> if I have a long period between the messages (e.g. 10 Minutes) the
> messsage is still logged to the local machine
> ( I write a second log to a local file) but no message reaches the
> server. all new messages are lost.
>
> if I restart the syslog deamon ill get messages again (but only new ones)
>
> I use Suse Linux 10.1 with syslog-ng (2.x) (client)
>
> I also compiled and tried 3.0.1 but git the same effect.
>
> any idea ?
did you enable flow control towards the TCP destination?
what aboud dropped counters? it might be syslog-ng itself that drops
messages, but there's always a reason why it does it.
I don't see why it would be related to idle times, syslog-ng tries to
keep the TCP connection alive at all times.
--
Bazsi
More information about the syslog-ng
mailing list