[syslog-ng] Reprocess disk buffer files

[Balazs Scheidler]

Hi,

You can use "dqtool cat" to extract messages from disk-queue files and
then reinject them using logger for instance. syslog-ng drops queue
files in case the config changes or an error occurs, but once it leaves
one behind, it'll never touch it again.

Also, please note that you can submit questions to our support team,
which is probably more timely than doing the same on this mailing
list :)

On Tue, 2012-03-20 at 15:05 -0700, Aaron Daniel wrote:
> In the LTS version of PE, we have some servers that have old
> disk-buffer files (var/*qf) still on disk, with the contents not sent
> to a central server.  Is there a way to force syslog-ng to re-process
> those, or do we have to manually process them ourselves? 
> 
> 
> The files contain very old log entries that still need to be
> processed, and syslog-ng appears to be using a newer *.qf file for
> it's disk buffer.  When it does this, it's completely ignoring the old
> log entries so we have some gaps in our central processing system.
> 
> 
> (Sorry if this has been asked before, google's not been my friend on
> this search...)


-- 
Bazsi