Re: Odd syslog-ng problem

[Gary Josack <gary () byoteki com>]

It's hard to say without seeing the actual script. Is your script running
as a daemon or are you counting on syslog-ng to start your program per
message. If the latter, that's probably not the best strategy.


On Sat, May 10, 2014 at 2:24 AM, Peter Persson <webbax () webbax se> wrote:

> Hey,
>
> I got a weird problem with my syslog-ng setup, im logging from alot of
> cisco machines and that works great.
> The problem is that when i "pass" this further to a shell program, some
> lines disapere.
>
> My destination looks like this
> destination hosts {
>    file("/var/log/ciscorouters/$HOST.log"
>    owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(yes));
>    program("/scripts/irc/syslog_wrapper_new.sh" template(t_irctempl));
> };
> The "/var/log/ciscorouters/$HOST.log" writes correct, but the data thats
> putted trough to "/scripts/irc/syslog_wrapper_new.sh" only get the first
> line, if it gets flooded (like 5 rows per second).
>
> Do anyone of you have any idea of what might be the problem?
>
> Regards,
> Peter