RafaĆ Radecki
2014-Jul-17 13:19 UTC
[CentOS] syslog-ng 2.1.4 - file sources are read only when reload or restart is performed?
Hi All ;) I am using a virtual machine with: Red Hat Enterprise Linux Server release 5.7 (Tikanga) Linux logserver01 2.6.18-274.el5 #1 SMP Fri Jul 8 17:36:59 EDT 2011 x86_64 x86_64 x86_64 GNU/Linux syslog-ng 2.1.4 I have following configuration: ... 9 options { 10 create_dirs (yes); 11 dir_group (root); 12 dir_owner (root); 13 dir_perm (0700); 14 group (root); 15 owner (root); 16 perm (0600); 17 flush_lines(1); 18 flush_timeout (1000); 19 keep_hostname (yes); 20 log_fifo_size (1); 21 use_dns (no); 22 use_fqdn (no); 23 }; ... 39 source s_stdout { 40 # file ("/logs/stdout.log" flags(no-parse) follow_freq(1)); 41 file ("/logs/stdout.log" flags(no-parse)); 42 }; ... 61 destination d_stdout { file("/var/log/$YEAR$MONTH$DAY/stdout"); }; ... 80 log { source(s_stdout); destination(d_stdout); }; The problem is that changes in /logs/stdout.log are only visible in /var/log/20140717/stdout when I perform /etc/init.d/syslog-ng reload or restart. I tried several settings of flush_*, log_fifo_size and follow_freq but with no luck :D Is it a problem withe the version that I use (quite old :D ) or is there a mistake in my configuration maybe? BR, Rafal.
John R Pierce
2014-Jul-17 18:21 UTC
[CentOS] syslog-ng 2.1.4 - file sources are read only when reload or restart is performed?
On 7/17/2014 6:19 AM, Rafa? Radecki wrote:> The problem is that changes in /logs/stdout.log are only visible in > /var/log/20140717/stdout when I perform /etc/init.d/syslog-ng reload or > restart. I tried several settings of flush_*, log_fifo_size and follow_freq > but with no luck :D > > Is it a problem withe the version that I use (quite old :D ) or is there a > mistake in my configuration maybe?afaik, syslog-ng isn't part of CentOS 5, and there is no top level directory /logs/ at all, logging is done to /var/log and the syslog config files are in /etc, so you must have a heavily customized system configuration. Since noone can possibly know what all you've done, it seems like you're on your own here. -- john r pierce 37N 122W somewhere on the middle of the left coast