On Friday 23 October 2009, Konrad Korzeniowski wrote:
> Hi,
>
> I don't know syslog-ng, but there is rsyslog solution:
> http://www.rsyslog.com/doc-rsyslog_reliable_forwarding.html
>
thanks. i will look into it.
> rgrds.,
> KK
>
> [2009-10-23 04:16] Chuck:
> > I doubt this is a vserver problem, but I am placing this here just in
case
> > there may be something.
> >
> > we run a remote logging server that every host and guest logs to in
addition
> > to local logs. when all is well this works just fine.
> >
> > if the remote log server is taken down, suddenly most of the hosts begin
> > chewing up all available memory and swap until they crash. disabling
remote
> > logging on everything cured this but obviously is not what we want.
> >
> > i am also posting this in the gentoo forum in case it is a syslog-ng or
other
> > issue.
> >
> > we use 2 lines in every syslog-ng config.. obviously the ip is changed for
> > public viewing:
> >
> > destination remote { udp("1.3.0.1"); };
> > log { source(src); destination(remote); };
> >
> > on all machines
> > kernel is
> >
> > 2.6.26-vs2.3.0.35.6-gentoo
> >
> > util-vserver is 0.30.215
> >
> >
> >
>
>
--
Chuck