[syslog-ng] Does syslog-ng 3.5.6 read from /run/systemd/journal/syslog ?

Per Jessen per at computer.org
Tue Mar 8 14:40:27 CET 2016


On openSUSE 13.2 with syslog-ng 3.5.6, I'm seeing these 
messages frequently:

Mar 08 14:15:01 piccard systemd-journal[367]: Forwarding to syslog missed 1 messages.
Mar 08 14:15:43 piccard systemd-journal[367]: Forwarding to syslog missed 3 messages.
Mar 08 14:20:01 piccard systemd-journal[367]: Forwarding to syslog missed 1 messages.
Mar 08 14:20:43 piccard systemd-journal[367]: Forwarding to syslog missed 1 messages.

journald by default has ForwardtoSyslog=yes, but

# lsof /run/systemd/journal/syslog
COMMAND   PID USER   FD   TYPE             DEVICE SIZE/OFF  NODE NAME
systemd     1 root   27u  unix 0xffff880013130400      0t0 13446 /run/systemd/journal/syslog
syslog-ng 584 root    3u  unix 0xffff880013130400      0t0 13446 /run/systemd/journal/syslog

seems to suggest syslog-ng is reading from /run/systemd/journal/syslog ?

syslog-ng.conf:

source src {
        system();
        internal();
};



-- 
Per Jessen, Zürich (2.4°C)
http://www.dns24.ch/ - your free DNS host, made in Switzerland.



More information about the syslog-ng mailing list