[syslog-ng] Syslog-ng stops writing until restarted

[Faine, Mark R. (MSFC-IS40)[NICS]]

Thank you, it seems to be corrected now.  We believe the outgoing network destinations were blocking but a buffer was still being written to, so when we restarted the buffer was flushed.  We are still investigating a root cause but the resolution so far has been to put a backup configuration file in place.  We are now examining the configuration file differences.   I can't really post that file here but I do appreciate your help.

-Mark

From: syslog-ng <syslog-ng-bounces at lists.balabit.hu> On Behalf Of Gabor Nagy (gnagy)
Sent: Tuesday, August 6, 2019 5:33 AM
To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu>
Subject: [EXTERNAL] Re: [syslog-ng] Syslog-ng stops writing until restarted

Can you give some details, please? E.g. some configuration detail,  what do you see on the statistics output?
I have one or two things in mind that can help.

Gabor
________________________________
From: syslog-ng <syslog-ng-bounces at lists.balabit.hu<mailto:syslog-ng-bounces at lists.balabit.hu>> on behalf of Faine, Mark R. (MSFC-IS40)[NICS] <mark.faine at nasa.gov<mailto:mark.faine at nasa.gov>>
Sent: Monday, August 5, 2019 20:58
To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu<mailto:syslog-ng at lists.balabit.hu>>
Subject: [syslog-ng] Syslog-ng stops writing until restarted

CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.


I have a strange problem where logs are definitely coming in over tcp and udp however they are not written, well not until I restart the server.  Whenever I restart the logs are written but shortly after starting they stop until the server is restarted again.



Any ideas on where I can look?



Thanks,

-Mark




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20190807/0952cb80/attachment.html>