[syslog-ng] Issue with syslog-ng and Windows Server 2012
Evan Rempel
erempel at uvic.ca
Fri Jan 15 22:27:45 CET 2016
Let me know how the support ticket works out for you. I have the same issue at my site!
Evan.
On 01/15/2016 12:58 PM, Scheidler, Balázs wrote:
>
> How do you run syslog-ng on Windows? Is it a PE binary? For that you can get support through official support channels. I can help you to the proper contact if you want.
> Or is it a cygwin issue?
>
> On Jan 15, 2016 5:41 PM, "Artyom Gavrichenkov" <ximaera at gmail.com <mailto:ximaera at gmail.com>> wrote:
>
> Hi all,
>
> Since Windows Vista (and Server 2012), in NTFS, file size is updated
> not when its contents are being flushed to disk, but when the last
> handle to the corresponding file object is closed. More on that here:
> https://blogs.msdn.microsoft.com/oldnewthing/20111226-00/?p=8813
>
> What this means in practice is that an application log file might
> already be quite large, but its reported file size will still be zero
> unless some other application will open(), read() and then close() it.
> And seems like it breaks syslog-ng’s source() file() handler in case
> the filename in file() arguments contains wildcards.
>
> Could anyone please look into it?
>
> | Artyom Gavrichenkov
> | gpg: fa1c670e
> | mailto: ximaera at gmail.com <mailto:ximaera at gmail.com>
> | xmpp: ximaera at gmail.com <mailto:ximaera at gmail.com>
> | tel. no: +7 916 515 49 58 <tel:%2B7%20916%20515%2049%2058>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20160115/6672ed43/attachment.htm
More information about the syslog-ng
mailing list