new copr package required: fatal error is syslog-ng 4.8 from copr when reading pipe sources.

Evan Rempel <[email protected]> Mon, 23 Sep 2024 13:58:49 +0000
Newsgroups gmane.comp.syslog-ng
Message-ID <YT4P288MB033533501BA7148331BF0EA9B96F2@YT4P288MB0335.CANP288.PROD.OUTLOOK.COM>
I should have looked at reported issues. This issue was reported previously at

https://github.com/syslog-ng/syslog-ng/issues/5057

And the PR has already been created.

I will wait for an updated package from copr.


--
Evan
________________________________
From: syslog-ng <[email protected]> on behalf of Evan Rempel <[email protected]>
Sent: September 20, 2024 12:08 PM
To: [email protected] <[email protected]>
Subject: [syslog-ng] fatal error is syslog-ng 4.8 from copr when reading pipe sources.

I upgraded syslog-ng today from 4.6 to 4.8 and my disk drive almost immediately filled due to the local error from syslog-ng

2024-09-20T11:59:38.760-07:00 hostname syslog.err syslog-ng[600690]: Error invoking seek on file; filename='/var/log/syslog.pipes/mailstats2', error='Illegal seek (29)'

This logged repeatedly until the disk filled up.

My source definition for that pipe is

source mailstats2 { pipe("/var/log/syslog.pipes/mailstats2" log_iw_size(900000) log_fetch_limit(500) flags(no-parse) ); };

Any insight would be useful.

--
Evan

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq