[syslog-ng] loosing Messages via Modem (GPRS/UMTS) connection

Balazs Scheidler bazsi at balabit.hu
Thu Mar 12 16:02:13 CET 2009


On Thu, 2009-03-12 at 00:32 +0100, Jens-Peter C. Hillers wrote:
> Hi,
> 
> I try to log to a remote Syslog Server via:
> 
> destination logserver { tcp("log.mydomain.xyz" port(514) flush_lines(1)
> flush_timeout(10) keep-alive(yes) ); };
> 
> if I have a long period between the messages (e.g. 10 Minutes) the
> messsage is still logged to the local machine
> ( I write a second log to a local file) but no message reaches the
> server. all new messages are lost.
> 
> if I restart the syslog deamon ill get messages again (but only new ones)
> 
> I use Suse Linux 10.1 with syslog-ng (2.x)  (client)
> 
> I also compiled and tried 3.0.1 but git the same effect.
> 
> any idea ?

did you enable flow control towards the TCP destination?

what aboud dropped counters? it might be syslog-ng itself that drops
messages, but there's always a reason why it does it.

I don't see why it would be related to idle times, syslog-ng tries to
keep the TCP connection alive at all times.

-- 
Bazsi



More information about the syslog-ng mailing list