[171706] in North American Network Operators' Group
Re: Odd syslog-ng problem
daemon@ATHENA.MIT.EDU (jamie rishaw)
Sat May 10 14:49:24 2014
X-Original-To: nanog@nanog.org
In-Reply-To: <CALfFPn94ZWxOZpJ2DO9r7-zn7WUwdvXGHCwu8ArNhF-x=TwVsA@mail.gmail.com>
Date: Sat, 10 May 2014 13:49:16 -0500
From: jamie rishaw <j@arpa.com>
To: Peter Persson <webbax@webbax.se>
Cc: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
Off topic.
The issue is with the daemon, not your devices.
https://lists.balabit.hu/mailman/listinfo/syslog-ng
On Sat, May 10, 2014 at 4:24 AM, Peter Persson <webbax@webbax.se> wrote:
> Hey,
>
> I got a weird problem with my syslog-ng setup, im logging from alot of
> cisco machines and that works great.
> The problem is that when i "pass" this further to a shell program, some
> lines disapere.
>
> My destination looks like this
> destination hosts {
> file("/var/log/ciscorouters/$HOST.log"
> owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(yes));
> program("/scripts/irc/syslog_wrapper_new.sh" template(t_irctempl));
> };
> The "/var/log/ciscorouters/$HOST.log" writes correct, but the data thats
> putted trough to "/scripts/irc/syslog_wrapper_new.sh" only get the first
> line, if it gets flooded (like 5 rows per second).
>
> Do anyone of you have any idea of what might be the problem?
>
> Regards,
> Peter
--
jamie rishaw // .com.arpa@j <- reverse it. ish.
"...let's consider this world like a family and care about each other..."
-Malala Yousafzai
