[syslog-ng] question about pattern database version 1
Balazs Scheidler
bazsi at balabit.hu
Wed Jan 20 20:00:37 CET 2010
On Wed, 2010-01-20 at 13:22 +0100, Guillaume Rousse wrote:
> Hello list.
>
> The pattern database format 1 seems to force a mandatory program
> pattern, wich doesn't exists for some messages, suchas kernel oops and
> memory exhaustion issues:
> Jan 19 15:18:24 localhost Call Trace:
> Jan 19 15:18:24 localhost ntpd invoked oom-killer: gfp_mask=0x1201d2,
> order=0, oomkilladj=0
>
> It seems to be corrected in version 2:
> rulesets can be defined without program pattern where these act as a
> fail-back rule sets if no program pattern is matching or when message
> does not have program part
>
> I guess that means I'm can't do anything to catch those problems as long
> as syslog-ng 3.1 OSE is released, right ?
>
Well, you could always try the current beta version. Seems to run fine
for a number of people.
--
Bazsi
More information about the syslog-ng
mailing list