[syslog-ng] Reaping unused destination files

Jordi Prats jordi.prats at gmail.com
Fri May 24 09:51:00 CEST 2013


Hi,
After updating to syslog-ng 3.2, I'm no longer getting any logs. It reports
some destinations as unused:

May 23 17:09:16 borg syslog-ng[27957]: Reaping unused destination files;
template='/var/log/firewalls/$YEAR/$MONTH/$DAY/$HOST.log'
May 23 17:09:16 borg syslog-ng[27957]: Reaping unused destination files;
template='/var/log/troncal/$YEAR/$MONTH/$DAY/$SOURCEIP.log'
May 23 17:09:16 borg syslog-ng[27957]: Reaping unused destination files;
template='/var/log/remote/$HOST/$YEAR/$MONTH/$DAY/$PROGRAM/$FACILITY'

But I have no clue why, as this configuration was working on another system
(I'm pretty sure it was an older version, but I can't tell which exactly)

My config is as follows:

options {
    time_reopen (10);
    long_hostnames (off);
    use_dns (no);
    use_fqdn (no);
    create_dirs (yes);
    keep_hostname (yes);

        sync (5000);
        time_reap(5);
        log_fifo_size (536870912);
        stats_freq(60);
        flush_lines(500);
        flush_timeout(10000);
};

source remote_tcp { tcp(port(514) keep-alive(no)); };

source remote_default { udp(ip(192.168.1.1) port(514)); };
source remote_servers { udp(ip(192.168.1.2) port(514)); };
source firewalls { udp(port(1515)); };
source troncal { udp(ip(192.168.1.3) port(514)); };


destination hosts {
file("/var/log/remote/$HOST/$YEAR/$MONTH/$DAY/$PROGRAM/$FACILITY"
owner(root)
  group(root) perm(0644) dir_perm(0755) create_dirs(yes)); };

destination firewalls {
file("/var/log/firewalls/$YEAR/$MONTH/$DAY/$HOST.log" owner(root)
  group(root) perm(0644) dir_perm(0755) create_dirs(yes)); };

destination troncal {
file("/var/log/troncal/$YEAR/$MONTH/$DAY/$SOURCEIP.log" owner(root)
  group(root) perm(0644) dir_perm(0755) create_dirs(yes)); };


log { source(remote_default); source(remote_servers); destination(hosts); };
log { source(firewalls); destination(firewalls); };
log { source(troncal); destination(troncal); };

Anyone can help me out?

Thank you!
-- 
Jordi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20130524/d5bfef79/attachment.htm 


More information about the syslog-ng mailing list