[syslog-ng] seems like program filter is broken
Stanislav
me at rooty.name
Wed Mar 20 03:41:14 UTC 2019
Greetings,
I'm getting this issue after my last package upgrade
======================================
Name : syslog-ng
Version : 3.20.1
Installed on : Mon Mar 11 23:27:29 2019 EET
Origin : sysutils/syslog-ng
Architecture : FreeBSD:12:amd64
Prefix : /usr/local
Categories : sysutils
Licenses :
Maintainer : cy at FreeBSD.org
WWW : http://www.syslog-ng.org/
Comment : Powerful syslogd replacement
Options :
AMQP : off
CURL : off
DOCS : on
GEOIP2 : off
IPV6 : off
JAVA : off
JAVA_MOD : off
JSON : on
MONGO : off
PYTHON : off
REDIS : off
RIEMANN : off
SMTP : off
SPOOF : off
SQL : off
TCP_WRAPPERS : off
======================================
I have following configuration:
options { chain_hostnames(off); flush_lines(0); threaded(yes);
create_dirs(yes); };
source local {
internal();
unix-dgram( "/var/run/log" owner(root) group(wheel)
perm(0666) );
unix-dgram( "/var/run/logpriv" owner(root) group(wheel)
perm(0600) );
file( "/dev/klog" program_override("kernel") );
};
...
destination all { file("/var/log/all.log"); };
destination maillog_mda { file("/var/log/maillog-mda"); };
...
filter p_mail_imap { program("dovecot"); };
...
log { source(local); destination(all); };
log { source(local); filter(p_mail_imap); destination(maillog_mda); };
======================================
# ps auxww|grep dovecot
root 9648 0.0 0.1 13268 4196 - Is 00:46 0:00.04
/usr/local/sbin/dovecot -c /usr/local/etc/dovecot/dovecot.conf
dovecot 9651 0.0 0.0 12724 3784 - I 00:46 0:00.01
anvil: [2 connections] (anvil)
root 15259 0.0 0.0 12796 4168 - I 01:42 0:00.00
dovecot/log
root 16126 0.0 0.1 13744 5020 - I 01:52 0:00.02
dovecot/config
dovecot 16127 0.0 0.0 12724 4180 - I 01:52 0:00.01
stats: [3 connections] (stats)
dovecot 17328 0.0 0.1 21284 12276 - I 02:05 0:00.01
auth: [0 wait, 0 passdb, 0 userdb] (auth)
======================================
# syslog-ng -s
# echo $?
0
======================================
I'm getting logs from dovecot program to /var/log/all.log but not
/var/log/maillog-mda . As I mentioned before it was working on previous
version of syslog-ng .
Does anybody have this issue? Just me, lucky?
More information about the syslog-ng
mailing list