[syslog-ng] Socket too many open files (24)

[Fabien Wernli]

On Thu, Apr 08, 2021 at 05:43:02PM +0000, Faine, Mark R. (MSFC-IS40)[NICS] wrote:
> syslog-ng 3 (3.19.1)
> Error Message:
> syslog-ng[50418]: Error accepting control socket connection; error='Too many open files (24)'
> 
> I'm seeing this in the syslog-ng logs.  However, I've done everything I can think of to increase the file handles and the number of open file handles does not seem to be anywhere close to the max.  What else could be causing this?

If you're on Linux, you can query syslog-ng's limits by checking out
/proc/<syslog-ng-pid>/limits

If those show a bad fd limit, the next step would be to narrow down the root
cause. I'd run syslog-ng on its own (without init system, systemd, and
whatnot) and check if it still runs into this problem.