[syslog-ng] config file question

[Zoltán Pallagi]

Hi Rory,

Will you tell me the current naming of your log files? I don't know the 
real reason for many log files, but as Robert said, perhaps, there are 
another easier solutions to avoid it.

Rory Toma írta:
> I could, but then I'd have to retrain non-technical folks on how to find 
> them, and get their support people to change tools... Kind of a headache...
>
> On 1/29/10 6:13 AM, Fekete Robert wrote:
>   
>> Hi,
>> Just a thought: do you really need to keep that many files open simultaneously?
>> Can't you use macros (e.g., $HOUR or even $MIN) to lower the number of files
>> needed in parallel?
>>
>> Robert
>>
>> Rory Toma wrote:
>>
>>    
>>     
>>> OK, I have a question. I've found that it is good to run several
>>> syslog-ng processes when dealing with tens of thousands of log files.
>>>
>>> So, I'd like to receive everything in one syslog-ng process, and forward
>>> them, via localhost, to about a hundred or so different syslog-ng
>>> processes on the same machine. Is there a good way to write a  (log;
>>> filter; dest;) line that would round-robin between a bunch of
>>> destinations in a single line?
>>> ______________________________________________________________________________
>>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>>> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
>>> FAQ: http://www.campin.net/syslog-ng/faq.html
>>>
>>>
>>>      
>>>       
>> ______________________________________________________________________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
>> FAQ: http://www.campin.net/syslog-ng/faq.html
>>
>>    
>>     
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
>
>
>   


-- 
pzolee

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20100202/c7251415/attachment.htm