[syslog-ng] Installing multiple instances of Syslog-NG

[Shashank Rohatgi]

Any help creating init script for multiple syslog-ng instances running on
same machine?


On Thu, Mar 6, 2014 at 9:54 AM, Shashank Rohatgi <srck85 at gmail.com> wrote:

> So here was the issue.
> having udp(so_rcvbuf(1024000) in the syslog-ng conf was creating the issue.
> when i commented this it would have visibility  only to the logs
> specificly  forwarded to it..
>
> And talking about log rotation,
> Any ideas other than using $YEAR/$MONTH/ basically date parameters to
> rotate logs on and successfully have crons to delete them?
>
> regards
>
>
> On Wed, Mar 5, 2014 at 11:58 PM, Evan Rempel <erempel at uvic.ca> wrote:
>
>> We do exactly what you describe without any issues.
>>
>> Strictly a config issue, so you could attach your config file(s) so I can
>> have a look.
>>
>> On 03/04/2014 10:23 PM, Shashank Rohatgi wrote:
>> > i was able to run the second instance with all three parameters but I
>> am more confused..
>> > The intent was to reroute messages from production instance to dev
>> instances on the same machine and take out a selected steam of logs on a
>> different port.
>> > rather than just the selected stream the second instance can see all
>> the logs.  Both the instances are listening on different ports.
>> >
>> >   Port 514- gets logs from two products (say windows and unix)  i write
>> Windows to disk and route the unix logs on say port 517 (to second instance)
>> > Second instance is configure to write anything that it receives to a
>> file.
>> > To my surprise the above  file has logs for Windows and there is no
>> network exchange at all.
>> >
>> > Could it be that the second instance internally confusing sources and
>> destinations?
>>
>> ______________________________________________________________________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation:
>> http://www.balabit.com/support/documentation/?product=syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20140313/f3b6b665/attachment.htm