Per Jessen wrote:
Andrei Borzenkov wrote:
But in case of systemd there is single process - journald - that is syslogd client and journald is not allowed to block indefinitely. So it is using non-blocking mode and simply discards messages if it cannot send them to syslogd (meaning - socket buffer is full).
In my case, there's hardly any activity on the system, not to mention the log. Only when cron kicks in and wants to write to the log. It seems highly unlikely that such minimal activity should cause the socket buffer to be full. (unless it is incredibly small perhaps).
In case of rsyslog the solution is actually to use rsyslog journald support that pulls data itself.
syslog-ng 3.5.4 on openSUSE 13.2 does not have this support, afaict. Which I guess means using ForwardToSyslog=yes, the default.
Never mind, I had a nagging doubt and went through my bugreports this morning -
https://bugzilla.opensuse.org/show_bug.cgi?id=922191
I'll install a recent syslog-ng 3.6 on a test system and see what happens.
I installed Peter Czanik's syslog-ng-3.6.4-2.1.i586.rpm. No change, I'm still seeing "systemd-journal[300]: Forwarding to syslog missed 9 messages". Every 15 minutes - 2016-03-08T10:30:01+01:00 sogo systemd[1]: Starting Session 3390 of user root. 2016-03-08T10:30:01+01:00 sogo systemd-journal[300]: Forwarding to syslog missed 1 messages. 2016-03-08T10:30:01+01:00 sogo systemd[1]: Started Session 3390 of user root. 2016-03-08T10:30:42+01:00 sogo systemd-journal[300]: Forwarding to syslog missed 1 messages. 2016-03-08T10:36:33+01:00 sogo wickedd-dhcp4[484]: eth0: Committed DHCPv4 lease with address 192.168.2.159 (lease time 86400 sec, renew in 43200 sec, rebind in 75600 sec) 2016-03-08T10:36:33+01:00 sogo systemd-journal[300]: Forwarding to syslog missed 1 messages. 2016-03-08T10:45:01+01:00 sogo systemd[1]: Starting Session 3391 of user root. 2016-03-08T10:45:01+01:00 sogo systemd[1]: Started Session 3391 of user root. 2016-03-08T10:45:01+01:00 sogo systemd-journal[300]: Forwarding to syslog missed 2 messages. -- Per Jessen, Zürich (1.3°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org