[syslog-ng] queue management

[Balazs Scheidler]

On Fri, 2010-03-05 at 17:49 -0500, Eric Snow wrote:
> Hi,
> 
>  
> 
> I am looking to manage my output buffers.  I have one destination that
> sometimes has trouble and I want to be able to manage the messages
> that got buffered while I fix my flaky destination.  Is there any tool
> I can use to manage those buffered messages?  If not, isn’t there any
> exception handling that I can apply to a log such that errors or other
> failures for that log can be redirected to another destination?  I
> want to avoid clogging up my output queue and especially to avoid
> losing any messages.  Thanks!

you mean you have disk based buffering? in the upcoming 3.1 version (due
to be released within 2 weeks), there's a tool called dqtool to dump the
contents of the queue file, although I'm not sure that's what you meant.
there are further disk buffer related improvements in the queue for 3.2,
and also a way to send the messages to a failed destination to an
alternate server.

also, syslog-ng is counting the number of messages in a given queue,
using its statistics framework. it is the stored counter you can see for
a given destination. this gets reported in the 'log statistics' message,
or via the syslog-ng control socket (/opt/syslog-ng/var/syslog-ng.ctl).


-- 
Bazsi