[syslog-ng] Upon syslog-ng reload /restart a flood of logs is received at a tcp port (destination)

Shruthi Rao shruthirao5 at gmail.com
Fri Oct 9 13:48:41 CEST 2015


I have configured a destination in syslog to a tcp port on localhost

options { long_hostnames(off); sync(0); perm(0640); stats(3600); };

source src { internal(); unix-dgram("/dev/log"); udp(); };

destination mgagent{ tcp("127.0.0.1" port(5009) template("$TAG $HOST
$PROGRAM $MSGONLY\n")); };

I have a tcp server n the localhost ,receiving logs on this port and it
does further processing .

Whenever syslog-ng is reloaded or restarted and te tcp server is running ,
a flood of the logs is sent on this tcp port ( which is handled by the tcp
server) , but this is not wanted. The logs which were already sent before
restart is sent repeatedly . Is there any way to stop or prevent this .

syslog version is syslog-ng 2.0.9 on SLES 11 SP3

-Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20151009/31cf9955/attachment.htm 


More information about the syslog-ng mailing list