[syslog-ng] Issue with syslog-ng and Windows Server 2012

Scheidler, Balázs balazs.scheidler at balabit.com
Fri Jan 15 21:58:07 CET 2016


How do you run syslog-ng on Windows? Is it a PE binary? For that you can
get support through official support channels. I can help you to the proper
contact if you want.
Or is it a cygwin issue?
On Jan 15, 2016 5:41 PM, "Artyom Gavrichenkov" <ximaera at gmail.com> wrote:

> Hi all,
>
> Since Windows Vista (and Server 2012), in NTFS, file size is updated
> not when its contents are being flushed to disk, but when the last
> handle to the corresponding file object is closed. More on that here:
> https://blogs.msdn.microsoft.com/oldnewthing/20111226-00/?p=8813
>
> What this means in practice is that an application log file might
> already be quite large, but its reported file size will still be zero
> unless some other application will open(), read() and then close() it.
> And seems like it breaks syslog-ng’s source() file() handler in case
> the filename in file() arguments contains wildcards.
>
> Could anyone please look into it?
>
> | Artyom Gavrichenkov
> | gpg: fa1c670e
> | mailto: ximaera at gmail.com
> | xmpp: ximaera at gmail.com
> | tel. no: +7 916 515 49 58
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20160115/5f90a641/attachment-0001.htm 


More information about the syslog-ng mailing list