syslog-ng not writing events

Mark_667 · 04-03-2017, 08:42 AM

I'm using syslog-ng on SLES11 and have found that it's no longer writing to the log file. Pointing strace at the process shows it processing messages and I can see the write entry for the logger command I sent but the last I can see in /var/log/messages is a shutdown event. What may cause this?

MensaWater · 04-03-2017, 11:49 AM

We run syslog-ng on one of our RHEL systems for getting logs from all network devices but don't write that into /var/log/messages. We also still run rsyslogd for local messages from the server itself.

We've found in the past that the order these are started matters. One must start syslog-ng first then rsyslogd.

You might want to check if rsyslog is also running and if so, whether it started before or after syslog-ng.