[syslog-ng] blocking on /dev/log
Gergely Nagy
algernon at balabit.hu
Thu Sep 12 10:59:51 CEST 2013
Micah Anderson <micah at riseup.net> writes:
> [pid 9051] connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
Are you using systemd or something similar? If yes, you should be using
/run/systemd/journal/syslog instead of /dev/log. If not, I'd be curious
to either see a strace of syslog-ng starting up, or an lsof of /dev/log.
> ########################
> # Sources
> ########################
> source s_all {
> internal();
> unix-stream("/dev/log" max-connections(2048));
> file("/proc/kmsg" program_override("kernel"));
> };
I would suggest using system() here, that does the right thing and is
forward-compatible. You will need to @include "scl.conf" before being
able to do so, though.
--
|8]
More information about the syslog-ng
mailing list