[Syslog-ng-maintainers] Bug#703639: "kill -HUP $(cat /var/run/syslog-ng.pid)" can cause duplicate logging issues

Evgeni Golov evgeni at debian.org
Mon Nov 10 11:04:20 GMT 2014


Hi again,

On Mon, Nov 03, 2014 at 04:47:28PM +0100, Evgeni Golov wrote:

> Trial-and-error says, removing the following lines helps...
> 
> > # Graylog2
> > destination d_graylog2 { udp("192.0.2.91" port(514) spoof_source(yes)); };
> > log { source(remotesrc); filter(f_cust_prod); destination(d_cust_prod); destination(d_graylog2); };
> > log { source(remotesrc); filter(f_mail); filter(f_cust_mail); destination(d_cust_mail); destination(d_graylog2); };
> 
> Is this by any possibility some buffering issue when forwarding 
> messages?

It seems to be the d_graylog2 part, not sending traffic to a remote UDP 
destination "solves" the issue for us.

Do you have any more clues how to fix this properly?

Greets
Evgeni




More information about the Syslog-ng-maintainers mailing list