[syslog-ng] Does syslog-ng 3.5.6 read from /run/systemd/journal/syslog ?
Per Jessen
per at computer.org
Tue Mar 8 14:40:27 CET 2016
On openSUSE 13.2 with syslog-ng 3.5.6, I'm seeing these
messages frequently:
Mar 08 14:15:01 piccard systemd-journal[367]: Forwarding to syslog missed 1 messages.
Mar 08 14:15:43 piccard systemd-journal[367]: Forwarding to syslog missed 3 messages.
Mar 08 14:20:01 piccard systemd-journal[367]: Forwarding to syslog missed 1 messages.
Mar 08 14:20:43 piccard systemd-journal[367]: Forwarding to syslog missed 1 messages.
journald by default has ForwardtoSyslog=yes, but
# lsof /run/systemd/journal/syslog
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
systemd 1 root 27u unix 0xffff880013130400 0t0 13446 /run/systemd/journal/syslog
syslog-ng 584 root 3u unix 0xffff880013130400 0t0 13446 /run/systemd/journal/syslog
seems to suggest syslog-ng is reading from /run/systemd/journal/syslog ?
syslog-ng.conf:
source src {
system();
internal();
};
--
Per Jessen, Zürich (2.4°C)
http://www.dns24.ch/ - your free DNS host, made in Switzerland.
More information about the syslog-ng
mailing list