On 2016-03-07 13:44, Charles Philip Chan wrote:
Per Jessen <> writes:
Hi Per:
I know this should be fairly obvious, I guess the question is _why_ did syslog-ng miss some messages and do I do about it? On some 13.2 systems, I see this quite a lot, on e.g. 12.3 hardly ever.
Interesting, what is missing? Maybe you have services not configured for syslog-ng? I have journald storage completely disabled, so I haven't noticed anything. However, I use rsyslog, so YMMV.
I see those messages and I use rsyslog. Telcontar:~ # journalctl --no-pager | grep missed Mar 05 10:47:33 Telcontar systemd-journal[316]: Forwarding to syslog missed 280 messages. Mar 05 10:48:03 Telcontar systemd-journal[316]: Forwarding to syslog missed 142 messages. Mar 05 10:49:30 Telcontar systemd-journal[316]: Forwarding to syslog missed 1 messages. Mar 05 10:50:00 Telcontar systemd-journal[316]: Forwarding to syslog missed 1 messages. Mar 05 10:50:48 Telcontar systemd-journal[316]: Forwarding to syslog missed 2 messages. Mar 05 11:41:55 Telcontar systemd-journal[316]: Forwarding to syslog missed 5 messages. Mar 05 11:42:37 Telcontar systemd-journal[316]: Forwarding to syslog missed 2 messages. Mar 05 12:02:49 Telcontar systemd-journal[316]: Forwarding to syslog missed 1 messages. Mar 05 13:02:39 Telcontar systemd-journal[316]: Forwarding to syslog missed 4 messages. Mar 05 13:03:09 Telcontar systemd-journal[316]: Forwarding to syslog missed 4 messages. Mar 05 13:50:35 Telcontar systemd-journal[316]: Forwarding to syslog missed 1 messages. Mar 05 13:52:41 Telcontar systemd-journal[316]: Forwarding to syslog missed 2 messages. Mar 05 18:02:32 Telcontar systemd-journal[316]: Forwarding to syslog missed 1 messages. Mar 06 00:04:12 Telcontar systemd-journal[316]: Forwarding to syslog missed 3 messages. Mar 06 02:03:26 Telcontar systemd-journal[316]: Forwarding to syslog missed 3 messages. Mar 06 02:23:25 Telcontar systemd-journal[316]: Forwarding to syslog missed 2 messages. Mar 06 12:40:42 Telcontar systemd-journal[316]: Forwarding to syslog missed 2 messages. Mar 06 14:40:07 Telcontar systemd-journal[316]: Forwarding to syslog missed 1 messages. Mar 06 15:00:00 Telcontar systemd-journal[316]: Forwarding to syslog missed 2 messages. Mar 06 15:19:41 Telcontar systemd-journal[316]: Forwarding to syslog missed 1 messages. Mar 06 18:40:14 Telcontar systemd-journal[316]: Forwarding to syslog missed 2 messages. Mar 06 18:44:56 Telcontar systemd-journal[316]: Forwarding to syslog missed 1 messages. Mar 06 19:20:11 Telcontar systemd-journal[316]: Forwarding to syslog missed 1 messages. Mar 06 21:57:09 Telcontar systemd-journal[316]: Forwarding to syslog missed 7 messages. Mar 07 02:17:45 Telcontar systemd-journal[316]: Forwarding to syslog missed 4 messages. Mar 07 02:20:01 Telcontar systemd-journal[316]: Forwarding to syslog missed 4 messages. Mar 07 04:16:53 Telcontar systemd-journal[316]: Forwarding to syslog missed 5 messages. Mar 07 04:37:17 Telcontar systemd-journal[316]: Forwarding to syslog missed 1 messages. Mar 07 13:49:08 Telcontar systemd-journal[316]: Forwarding to syslog missed 6 messages. Mar 07 13:49:43 Telcontar systemd-journal[316]: Forwarding to syslog missed 8 messages. Mar 07 13:52:00 Telcontar systemd-journal[316]: Forwarding to syslog missed 3 messages. Mar 07 13:53:58 Telcontar systemd-journal[316]: Forwarding to syslog missed 2 messages. Mar 07 14:52:06 Telcontar systemd-journal[316]: Forwarding to syslog missed 4 messages. Mar 07 19:33:22 Telcontar systemd-journal[316]: Forwarding to syslog missed 1 messages. Mar 07 19:53:28 Telcontar systemd-journal[316]: Forwarding to syslog missed 1 messages. Mar 07 21:54:00 Telcontar systemd-journal[316]: Forwarding to syslog missed 5 messages. Telcontar:~ # How can I find what was lost? My guess is that systemd does not forward everything to the syslog daemon. -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar)