[syslog-ng] syslog doesn't log if system date is older than date on last reboot

[Balazs Scheidler]

But you are using journal source, so it might be related to that.

I am not sure weather you rely on journald or not, but as a workaround you
could just use a unix-dgram() source and bypass journald by making sure
/dev/log points to syslog-ng.

Journald based logging is pretty slow and unless you have a usecase for it,
it might be easier to bypass it completely. Makes the local logging path
much simpler.

On Tue, Feb 4, 2020, 13:23 Matus UHLAR - fantomas <uhlar at fantomas.sk> wrote:

> On 04.02.20 13:59, Abhi Arora wrote:
> >Continuing my previous email....
> >> Can you share your configuration, please?
> >I have shared over my last email
>
> well, gmail does not have a good interface to mailing list.
> (html mail with very bad plaintext conversion.
>
> >> Are you using system() source?
> >I didn't get you. Please elaborate. You mean source code system() library
> >function. If that you mean, then no we don't use it.
>
> However I saw there:
>
>    source s_src { systemd_journal(); internal();
>                 file("/proc/kmsg" program_override("kernel"));
>    };
>
> No, you don't use system() source, it looks like:
>
> source s_src {
>        system();
> ...
> };
>
> --
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> 2B|!2B, that's a question!
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20200205/d5596081/attachment.html>