[syslog-ng] syslog-ng leaves a lot of open file handles

[Anton Koldaev]

Hi, I'm using Syslog-NG OSE v.3.3.7-1~mhp1~lucid (Ubuntu Lucid)
And I have the following destination file():
    file("/u/logs/`app`/${MONTH}${DAY}/${1}/${1}${2}/${LOGSORT.ACCOUNT}.log"

Syslog-NG switches to the new file at 23:59:59 every day just fine but for
some reason it leaves files for the previous day open:
*# date*
Wed Jul 24 09:04:19 UTC 2013
*# lsof | grep a/ac/account.log*
syslog-ng 30743     root 3351w      REG              252,2    72597491
66306075 /u/logs/app/0723/a/ac/account.log (deleted)
syslog-ng 30743     root 4896w      REG              252,2    17017519
 4572052 /u/logs/app/0724/a/ac/account.log

And they're being deleted by my rotating script.
Reloading syslog-ng using init script or with `kill -HUP` doesn't help -
all deleted files are still open by syslog-ng.
Global option "time_reap (30);" doesn't seem to help too.

Any ideas?


-- 
Best regards,
Koldaev Anton
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20130724/62d2741a/attachment.htm