On 10/07/2014 13:27, [email protected] wrote:
> Hi. I was using syslog-ng 3.7 without any errors, but after upgrading
> to 3.8,
I take it you mean 3.4.7 -> 3.4.8?
> every day during my cron.daily, I get two copies of the message
> which says
> error: syslog-ng:7 duplicate log entry for /var/log/messages
>
> I could not find any release notes to tell me what they did which would
> cause this error -- anybody have a clue?
It's been a while since I dealt with that beast called syslog-ng, but
looking at your .conf I see:
log { source(local); filter(f_3); filter(f_4); filter(f_5); filter(f_6);
destination(d_3); };
Single log entries can easily match many of those filters leading to
duplicate entries all being written to d_3
The final flag is what deals with that. Use it in your filters to stop
processing for that message when matched.
I can't explain the change since 3.4.8 - perhaps it's a bug fix that
didn;t make it into the ChangeLog?
>
>
> Thanks in advance for any suggestions.
>
>
>
>
>
--
Alan McKinnon
[email protected]
