Home / server / Questions / 329280
In Process
Adam
Asked: 2011-11-10 05:16:51 +0800 CST

Why is syslog-ng randomly change the logging file from messages to messages.yyyymmddhhmm?

  • 772

Sometimes syslog-ng will change from logging to the file messages to filename with timestamp appended like this messages.yyyymmddhhmm. Of course this then breaks anything I have that is reviewing incoming logs in messages.

This on Ubuntu 10.04.3 LTS and syslog-ng 3.1.2-1~lucid1. Had same issue on syslog-ng 2.0.9-4.2.

syslog-ng

1 Answers

  1. That sounds like more of a logrotate issue. Take a look at /etc/logrotate.d and see if there's any configuration that would cause that.

    If syslog-ng is still appending to the rotated file, then the logrotate configuration for that particular log needs something to tell syslog-ng to start writing to the new file, something like:

       postrotate
      /usr/sbin/invoke-rc.d syslog-ng reload >/dev/null
   endscript

    in the configuration of the relevant log file rotation.

    • 1