[syslog-ng] mark-freq() and mark-mode() understanding
Sergey Y. Afonin
asy at kraft-s.ru
Wed Jun 24 09:38:48 CEST 2015
Hello.
I need an explanation of mark-freq() and mark-mode() works.
=== a part of syslog-ng.conf ===
options {
...
mark-freq(300);
...
}
destination mesg { file("/var/log/syslog/messages" mark-mode(periodical)); };
===
=== a part of /var/log/syslog/messages ===
Jun 24 08:26:35 -- MARK --
Jun 24 08:30:01 crond[10512]: (root) CMD ( /usr/bin/freshclam --quiet --daemon-notify)
Jun 24 08:31:30 -- MARK --
Jun 24 09:01:01 crond[10544]: (root) CMD (run-parts /etc/cron.hourly)
Jun 24 09:25:30 syslog-ng[9983]: Log statistics ...
===
"MARK" label absent between 08:31:30 and 09:01:01 for example.
Does it turns out that "idle" is checked for all file() globally ?
Can I setup it for one file() ?
--
Regards, Sergey.
More information about the syslog-ng
mailing list