Back to the main page
Issue with syslog-ng - inventing "new" hostnames ?????
The syslog-ng somehow invents hostname(s), or I don’t know how to solve this :-(
Here is the issue:
- The host (hostname = counterstrike2 and alias = cs2) is logging as below. Note there is more than one blank space between hostname and Error
Jul 22 18:56:02 cs2 Error for Command: write(10) Error Level: Retryable
syslog-ng (with using macro $HOST or without it) somehow decides to invent new hostnames as you can see below.
Yes, this only happens with more than one blank space between hostname and beginning of message.
/var/log/syslog-ng/hosts> ls
total 262
-rwxrwx--- 1 root root 5106 Jul 22 18:56 Error.syslog
-rwxrwx--- 1 root root 222 Jul 22 19:16 glm0.syslog
-rwxrwx--- 1 root root 74 Jul 22 19:16 glm1.syslog
-rwxrwx--- 1 root root 1856 Jul 22 18:56 got.syslog
-rwxrwx--- 1 root root 2610 Jul 22 18:56 Resetting.syslog
-rwxrwx--- 1 root root 284 Jul 22 19:16 Rev..syslog
-rwxrwx--- 1 root root 501 Jul 22 18:56 SCSI.syslog
-rwxrwx--- 1 root root 480 Jul 22 18:56 Target.syslog
drwxrwx--- 2 root root 512 Jul 22 19:16 .
drwxrwx--- 4 root root 512 Jul 22 18:41 ..
-rwxrwx--- 1 root root 538 Jul 22 18:53 counterstrike2.maillog
-rwxrwx--- 1 root root 76243 Jul 22 18:56 counterstrike2.syslog
-rwxrwx--- 1 root root 3309 Jul 22 19:41 gek.syslog
-rwxrwx--- 1 root root 18373 Jul 22 19:16 monitor.dc.maillog
-rwxrwx--- 1 root root 13274 Jul 22 19:19 monitor.dc.syslog
-rwxrwx--- 1 root root 557 Jul 22 18:42 testors.syslog
-rwxrwx--- 1 root root 364 Jul 22 18:42 unixlab-1.syslog
-rwxrwx--- 1 root root 219 Jul 22 19:16 Use.syslog
If you want to see these “new” files, you need to attach ? in front of it, see below
/var/log/syslog-ng/hosts> cat ?Error.syslog
2009-07-22T18:53:40-07:00 \011Error for Command: read(10) Error Level: Retryable
2009-07-22T18:53:40-07:00 \011Error for Command: write(10) Error Level: Retryable
2009-07-22T18:53:40-07:00 \011Error for Command: read(10) Error Level: Retryable
2009-07-22T18:53:40-07:00 \011Error for Command: write(10) Error Level: Retryable
Here is the syslog-ng.conf file
Back to the main page