[syslog-ng] How to detect loss of connection of remote syslog-ng client.

[Balazs Scheidler]

On Wed, 2011-11-16 at 14:59 +0530, Pramod Pillai wrote:
> Hi
> 
> I am using syslog-ng server on Solaris box and the syslog-ng clients
> are running on Linux box.
> When client ( linux )  box crashes the streaming stops. But the
> syslog-ng server assumes that the client is connected and keeps the
> connection.
> Is there any way to detect this condition and close the socket
> connection to the client which no longer exists.

If the connection is lost without any closing packets, then the only way
to work around this issue is to enable TCP keepalive with this option:

source s_tcp { tcp(so-keepalive(yes)); };

you may have to tune the TCP keep-alive options on the server.

it would probably make sense to create an inactivity timer, but that
doesn't exist right now.

-- 
Bazsi