Re: new copr package required: fatal error is syslog-ng 4.8 from copr when reading pipe sources.

"Peter Czanik (pczanik)" <[email protected]> Fri, 4 Oct 2024 11:10:23 +0000
Newsgroups gmane.comp.syslog-ng
Message-ID <CO1PR19MB512606D2E48D846B8624641B8B722@CO1PR19MB5126.namprd19.prod.outlook.com>
--===============7324092078995971264==
Content-Language: en-US
Content-Type: multipart/alternative;
	boundary="_000_CO1PR19MB512606D2E48D846B8624641B8B722CO1PR19MB5126namp_"

--_000_CO1PR19MB512606D2E48D846B8624641B8B722CO1PR19MB5126namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi Evan,

Version 4.8.1 of syslog-ng was released yesterday. It should also fix your =
problem. https://copr.fedorainfracloud.org/coprs/czanik/syslog-ng48/is alre=
ady updated to 4.8.1, the syslog-ng-stable repo will be updated with a few =
days of delay, as usual.

Have a nice weekend,

Peter

Peter Czanik (CzP) <[email protected]>
Balabit (a OneIdentity company) / syslog-ng upstream
https://syslog-ng.com/community/
https://twitter.com/PCzanik

________________________________
From: syslog-ng <[email protected]> on behalf of Evan Remp=
el <[email protected]>
Sent: Monday, September 23, 2024 15:58
To: Syslog-ng users' and developers' mailing list <[email protected].=
hu>
Subject: [syslog-ng] new copr package required: fatal error is syslog-ng 4.=
8 from copr when reading pipe sources.

CAUTION: This email originated from outside of the organization. Do not fol=
low guidance, click links, or open attachments unless you recognize the sen=
der and know the content is safe.

I should have looked at reported issues. This issue was reported previously=
 at

https://github.com/syslog-ng/syslog-ng/issues/5057

And the PR has already been created.

I will wait for an updated package from copr.


--
Evan
________________________________
From: syslog-ng <[email protected]> on behalf of Evan Remp=
el <[email protected]>
Sent: September 20, 2024 12:08 PM
To: [email protected] <[email protected]>
Subject: [syslog-ng] fatal error is syslog-ng 4.8 from copr when reading pi=
pe sources.

I upgraded syslog-ng today from 4.6 to 4.8 and my disk drive almost immedia=
tely filled due to the local error from syslog-ng

2024-09-20T11:59:38.760-07:00 hostname syslog.err syslog-ng[600690]: Error =
invoking seek on file; filename=3D'/var/log/syslog.pipes/mailstats2', error=
=3D'Illegal seek (29)'

This logged repeatedly until the disk filled up.

My source definition for that pipe is

source mailstats2 { pipe("/var/log/syslog.pipes/mailstats2" log_iw_size(900=
000) log_fetch_limit(500) flags(no-parse) ); };

Any insight would be useful.

--
Evan

--_000_CO1PR19MB512606D2E48D846B8624641B8B722CO1PR19MB5126namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=
olor: rgb(0, 0, 0);">
Hi Evan,</div>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=
olor: rgb(0, 0, 0);">
<br>
</div>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=
olor: rgb(0, 0, 0);">
Version 4.8.1 of syslog-ng was released yesterday. It should also fix your =
problem.
<a href=3D"https://copr.fedorainfracloud.org/coprs/czanik/syslog-ng48/">htt=
ps://copr.fedorainfracloud.org/coprs/czanik/syslog-ng48/</a>is already upda=
ted to 4.8.1, the syslog-ng-stable repo will be updated with a few days of =
delay, as usual.</div>
<div class=3D"elementToProof" style=3D"font-family: Aptos, Aptos_EmbeddedFo=
nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=
olor: rgb(0, 0, 0);">
<br>
</div>
<div id=3D"Signature" class=3D"elementToProof">
<div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, =
Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Have a nice weekend,</div>
<div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, =
Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, =
Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Peter</div>
<div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, =
Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"direction: ltr; font-family: Calibri, Arial, Helvetica, sans-=
serif; font-size: 12pt; color: rgb(0, 0, 0);">
Peter Czanik (CzP) &lt;[email protected]&gt;<br>
Balabit (a OneIdentity company) / syslog-ng upstream<br>
<a href=3D"https://syslog-ng.com/community/" target=3D"_blank">https://sysl=
og-ng.com/<wbr>community/</a><br>
<a href=3D"https://twitter.com/PCzanik" target=3D"_blank">https://twitter.c=
om/PCzanik</a></div>
<span style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-siz=
e: 12pt; color: rgb(0, 0, 0);">&nbsp;<br>
</span></div>
<div id=3D"appendonsend"></div>
<hr style=3D"display:inline-block;width:98%" tabindex=3D"-1">
<div id=3D"divRplyFwdMsg" dir=3D"ltr"><font face=3D"Calibri, sans-serif" st=
yle=3D"font-size:11pt" color=3D"#000000"><b>From:</b> syslog-ng &lt;syslog-=
[email protected]&gt; on behalf of Evan Rempel &lt;[email protected]=
a&gt;<br>
<b>Sent:</b> Monday, September 23, 2024 15:58<br>
<b>To:</b> Syslog-ng users' and developers' mailing list &lt;syslog-ng@list=
s.balabit.hu&gt;<br>
<b>Subject:</b> [syslog-ng] new copr package required: fatal error is syslo=
g-ng 4.8 from copr when reading pipe sources.</font>
<div>&nbsp;</div>
</div>
<style type=3D"text/css" style=3D"display:none">
<!--
p
	{margin-top:0;
	margin-bottom:0}
-->
</style>
<div dir=3D"ltr">
<div style=3D"background-color:#FFEB9C; width:100%; border-style:solid; bor=
der-color:#9C6500; border-width:1pt; padding:2pt; font-size:10pt; line-heig=
ht:12pt; font-family:'Calibri'; color:Black; text-align:left">
<span style=3D"color:#9C6500; font-weight:bold">CAUTION:</span> This email =
originated from outside of the organization. Do not follow guidance, click =
links, or open attachments unless you recognize the sender and know the con=
tent is safe.</div>
<br>
<div>
<div class=3D"x_elementToProof" style=3D"font-family:Aptos,Aptos_EmbeddedFo=
nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=
rgb(0,0,0)">
I should have looked at reported issues. This issue was reported previously=
 at</div>
<div class=3D"x_elementToProof" style=3D"font-family:Aptos,Aptos_EmbeddedFo=
nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=
rgb(0,0,0)">
<br>
</div>
<div class=3D"x_elementToProof" style=3D"font-family:Aptos,Aptos_EmbeddedFo=
nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=
rgb(0,0,0)">
<a href=3D"https://github.com/syslog-ng/syslog-ng/issues/5057" originalsrc=
=3D"https://github.com/syslog-ng/syslog-ng/issues/5057" shash=3D"QmGxlaDjWv=
w1aId03kZtZAL3E5aCtuO7kh/Lz70kalNlHAhtLQq3XXuen13c+7+/LHBA/llTYt5Ff+JbPM12C=
YpB9+OsIeXlLyjtT+JoOeZvfNYrf+3K9Ql2ssryljFxfxZU4AAq2F8o3iEDNiM5IXllXKwmU8Fg=
QfyxW/1YAQQ=3D" id=3D"LPlnk518253">https://github.com/syslog-ng/syslog-ng/i=
ssues/5057</a></div>
<div class=3D"x_elementToProof" style=3D"font-family:Aptos,Aptos_EmbeddedFo=
nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=
rgb(0,0,0)">
<br>
</div>
<div class=3D"x_elementToProof" style=3D"font-family:Aptos,Aptos_EmbeddedFo=
nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=
rgb(0,0,0)">
And the PR has already been created.</div>
<div class=3D"x_elementToProof" style=3D"font-family:Aptos,Aptos_EmbeddedFo=
nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=
rgb(0,0,0)">
<br>
</div>
<div class=3D"x_elementToProof" style=3D"font-family:Aptos,Aptos_EmbeddedFo=
nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=
rgb(0,0,0)">
I will wait for an updated package from copr.</div>
<div class=3D"x_elementToProof" style=3D"font-family:Aptos,Aptos_EmbeddedFo=
nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=
rgb(0,0,0)">
<br>
</div>
<div class=3D"x_elementToProof" style=3D"font-family:Aptos,Aptos_EmbeddedFo=
nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=
rgb(0,0,0)">
<br>
</div>
<div id=3D"x_Signature">
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif; font-size:12pt; color:rgb(153,153,153)">
--</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif; font-size:12pt; color:rgb(153,153,153)">
Evan</div>
</div>
<div id=3D"x_appendonsend"></div>
<hr tabindex=3D"-1" style=3D"display:inline-block; width:98%">
<div id=3D"x_divRplyFwdMsg" dir=3D"ltr"><font face=3D"Calibri, sans-serif" =
color=3D"#000000" style=3D"font-size:11pt"><b>From:</b> syslog-ng &lt;syslo=
[email protected]&gt; on behalf of Evan Rempel &lt;erempel@uvic=
.ca&gt;<br>
<b>Sent:</b> September 20, 2024 12:08 PM<br>
<b>To:</b> [email protected] &lt;[email protected]&gt;<br=
>
<b>Subject:</b> [syslog-ng] fatal error is syslog-ng 4.8 from copr when rea=
ding pipe sources.</font>
<div>&nbsp;</div>
</div>
<style type=3D"text/css" style=3D"display:none">
<!--
p
	{margin-top:0;
	margin-bottom:0}
-->
</style>
<div dir=3D"ltr">
<div class=3D"x_x_elementToProof" style=3D"font-family:Aptos,Aptos_Embedded=
Font,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; colo=
r:rgb(0,0,0)">
I upgraded syslog-ng today from 4.6 to 4.8 and my disk drive almost immedia=
tely filled due to the local error from syslog-ng</div>
<div class=3D"x_x_elementToProof" style=3D"font-family:Aptos,Aptos_Embedded=
Font,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; colo=
r:rgb(0,0,0)">
<br>
</div>
<div class=3D"x_x_elementToProof" style=3D"font-family:Aptos,Aptos_Embedded=
Font,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; colo=
r:rgb(0,0,0)">
2024-09-20T11:59:38.760-07:00 hostname syslog.err syslog-ng[600690]: Error =
invoking seek on file; filename=3D'/var/log/syslog.pipes/mailstats2', error=
=3D'Illegal seek (29)'<br>
<br>
</div>
<div class=3D"x_x_elementToProof" style=3D"font-family:Aptos,Aptos_Embedded=
Font,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; colo=
r:rgb(0,0,0)">
This logged repeatedly until the disk filled up.</div>
<div class=3D"x_x_elementToProof" style=3D"font-family:Aptos,Aptos_Embedded=
Font,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; colo=
r:rgb(0,0,0)">
<br>
</div>
<div class=3D"x_x_elementToProof" style=3D"font-family:Aptos,Aptos_Embedded=
Font,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; colo=
r:rgb(0,0,0)">
My source definition for that pipe is</div>
<div class=3D"x_x_elementToProof" style=3D"font-family:Aptos,Aptos_Embedded=
Font,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; colo=
r:rgb(0,0,0)">
<br>
</div>
<div class=3D"x_x_elementToProof" style=3D"font-family:Aptos,Aptos_Embedded=
Font,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; colo=
r:rgb(0,0,0)">
source mailstats2 { pipe(&quot;/var/log/syslog.pipes/mailstats2&quot; log_i=
w_size(900000) log_fetch_limit(500) flags(no-parse) ); };<br>
<br>
</div>
<div class=3D"x_x_elementToProof" style=3D"font-family:Aptos,Aptos_Embedded=
Font,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; colo=
r:rgb(0,0,0)">
Any insight would be useful.</div>
<div class=3D"x_x_elementToProof" style=3D"font-family:Aptos,Aptos_Embedded=
Font,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; colo=
r:rgb(0,0,0)">
<br>
</div>
<div id=3D"x_x_Signature">
<div style=3D"font-family:&quot;Courier New&quot;,monospace; color:rgb(153,=
153,153)"><span style=3D"font-size:14.6667px; background-color:rgb(255,255,=
255)">--</span><span style=3D"font-size:12pt"><br>
</span><span style=3D"font-size:14.6667px; background-color:rgb(255,255,255=
)">Evan</span></div>
</div>
</div>
</div>
</div>
</body>
</html>

--_000_CO1PR19MB512606D2E48D846B8624641B8B722CO1PR19MB5126namp_--

--===============7324092078995971264==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq


--===============7324092078995971264==--