[syslog-ng] Disk based queuing with rsyslog?

Delon Lee Di Lun lee.delon2005 at gmail.com
Tue May 8 01:50:08 UTC 2018


Hi!

Let me clarify.
The purpose of disk based buffering is to prevent the lost of logs due to
what factors?
It does prevent lost of logs due to restarting the syslog-ng right?

Buffering is done on the syslog-ng server end right?

Yours Sincerely,
Delon Lee


On Mon, 7 May 2018 at 23:18 Nagy, Gábor <gabor.nagy at balabit.com> wrote:

> Hello Delon Lee!
>
> You don't need the client to be syslog-ng for *disk based buffering on
> the host*, i.e. you only need syslog-ng where you would like to do the
> buffering.
> It should work with rsyslog as a client and syslog-ng as a host.
>
> Regards,
> Gabor
>
> On Mon, May 7, 2018 at 5:02 PM, Delon Lee Di Lun <lee.delon2005 at gmail.com>
> wrote:
>
>> Hi,
>>
>> I read that syslog-ng can be setup to use disk based with flow control
>> with the client to prevent lost of logs.
>>
>> However I was just thinking, how does this mechanism works? Does the
>> client have to be using syslog-ng? Will it work if the client is using
>> rsyslog? Native appliance that purely support syslog?
>>
>> Yours Sincerely,
>> Delon Lee
>>
>>
>> ______________________________________________________________________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation:
>> http://www.balabit.com/support/documentation/?product=syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20180508/b9b3c845/attachment.html>


More information about the syslog-ng mailing list