[syslog-ng] Local sources seem not to be working

[Alexandre Santos]

Hi,

I have syslog-ng 3.32.1 running in a Debian GNU/Linux 10 (buster) with the configuration in the attachement.

After sometime running, syslog-ng seems be unable to read from system() and internal() sources.
Log messages from syslog(ip(10.20.30.40) transport("udp") port(514) keep-alive(no)); are seen in the output folders.
Also journald logs are working fine.

After a reload of configuration in which what changes is this line:
rewrite r_host { set("MACHINE-${HOST}", value("HOST")); };
logging is resumed.

Here is the time gap for logs:
<43>1 2022-03-11T11:55:23.802+00:00 xmm4-1-1 syslog-ng 8283 - [meta sequenceId="767"] Last message 'Destination reliable' repeated 8933 times, suppressed by syslog-ng on xmm4-1-1
<46>1 2022-03-14T07:19:01.817+00:00 xmm4-1-1 syslog-ng 8283 - [meta sequenceId="1"] Module loaded and initialized successfully; module='syslogformat'

Do you know why this is happening?

Thanks & Regards,
Alex

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20220315/466078ba/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 42116.syslog-ng.conf
Type: application/octet-stream
Size: 13810 bytes
Desc: 42116.syslog-ng.conf
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20220315/466078ba/attachment-0001.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 42116.syslog-ng.log.gz
Type: application/x-gzip
Size: 231811 bytes
Desc: 42116.syslog-ng.log.gz
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20220315/466078ba/attachment-0001.bin>