[syslog-ng] [Bug 136] New: duplicated logpaths gives no error

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Thu Sep 29 11:32:24 CEST 2011


https://bugzilla.balabit.com/show_bug.cgi?id=136

           Summary: duplicated logpaths gives no error
           Product: syslog-ng
           Version: 3.2.x
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: balazs.nemeth at balabit.com
Type of the Report: ---
   Estimated Hours: 0.0


During my daily work I started to experience to receive every log message twice.
It turned out that I made a silly copy&paste mistake but syslog-ng showed no warning or something like that at all.

Steps to reproduce:
1) create a config like this

# snippet start

parser pattern_db {
    db_parser(
        file("/var/lib/misc/patterndb.xml")
    );
};

source s_netcat { 
    tcp(ip(127.0.0.1) port(5514));
};

destination d_patterndb { file("/var/log/hosts/$HOST/$R_YEAR.$R_MONTH.$R_DAY/messages-${.classifier.class}"); };

log{ source(s_netcat); parser(pattern_db); destination(d_netcat); };
log{ source(s_netcat); parser(pattern_db); destination(d_netcat); };

# snippet end

2) send logs with netcat
3) check that every log message arrives twice to the given destination


syslog-ng 3.2.4
Installer-Version: 3.2.4
Revision: ssh+git://bazsi@git.balabit//var/scm/git/syslog-ng/syslog-ng-ose--mainline--3.2#master#ef7b91e4a1b1f9628c66138b4ae83de7e4c697c6
Compile-Date: Aug 16 2011 09:13:16
Enable-Threads: off
Enable-Debug: off
Enable-GProf: off
Enable-Memtrace: off
Enable-Sun-STREAMS: off
Enable-IPv6: on
Enable-Spoof-Source: off
Enable-TCP-Wrapper: on
Enable-SSL: on
Enable-SQL: off
Enable-Linux-Caps: off
Enable-Pcre: on
Enable-Pacct: off


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list