[syslog-ng] FW: Syslog Problem

[Jim Hendrick]

I agree with Evan. You need to know which events are actually being received.  The simplified configuration I sent should provide that and the you can add back the filters and database destination. 
Jim


Sent from my Verizon Wireless 4G LTE smartphone


-------- Original message --------
From: Evan Rempel <erempel at uvic.ca> 
Date:08/06/2014  11:22 AM  (GMT-05:00) 
To: syslog-ng at lists.balabit.hu 
Subject: Re: [syslog-ng] FW: Syslog Problem 

> Could you please tell me how to check under load mysql silently drop records

There is no record that this occurs. You need to have an authoritative source of what should be in the database,
and then look to see what is actually in the database.

> And could you please tell me what is the solution for this problem?

To be honest, I wasn't very interested in the solution. The database should not have don that to begin with.
Depending on load and version of mysql the problem would go away, or return.

I never found a solution because I didn't look to hard for one.
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20140806/7dde8a3f/attachment.htm