[Syslog-ng-maintainers] Bug#703639: "kill -HUP $(cat /var/run/syslog-ng.pid)" can cause duplicate logging issues
Evgeni Golov
evgeni at debian.org
Mon Nov 10 11:04:20 GMT 2014
Hi again,
On Mon, Nov 03, 2014 at 04:47:28PM +0100, Evgeni Golov wrote:
> Trial-and-error says, removing the following lines helps...
>
> > # Graylog2
> > destination d_graylog2 { udp("192.0.2.91" port(514) spoof_source(yes)); };
> > log { source(remotesrc); filter(f_cust_prod); destination(d_cust_prod); destination(d_graylog2); };
> > log { source(remotesrc); filter(f_mail); filter(f_cust_mail); destination(d_cust_mail); destination(d_graylog2); };
>
> Is this by any possibility some buffering issue when forwarding
> messages?
It seems to be the d_graylog2 part, not sending traffic to a remote UDP
destination "solves" the issue for us.
Do you have any more clues how to fix this properly?
Greets
Evgeni
More information about the Syslog-ng-maintainers
mailing list