[syslog-ng] blocking on /dev/log

Gergely Nagy algernon at balabit.hu
Thu Sep 12 10:59:51 CEST 2013


Micah Anderson <micah at riseup.net> writes:

> [pid  9051] connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0

Are you using systemd or something similar? If yes, you should be using
/run/systemd/journal/syslog instead of /dev/log. If not, I'd be curious
to either see a strace of syslog-ng starting up, or an lsof of /dev/log.

> ########################
> # Sources
> ########################
> source s_all { 
>     internal();
>     unix-stream("/dev/log" max-connections(2048));
>     file("/proc/kmsg" program_override("kernel"));
>     };

I would suggest using system() here, that does the right thing and is
forward-compatible. You will need to @include "scl.conf" before being
able to do so, though.

-- 
|8]



More information about the syslog-ng mailing list