On 03.11.2011 21:32, Bob Corsaro wrote: > On Wed, Nov 2, 2011 at 3:15 PM, Andreas Piesk <[email protected]> wrote: > >> i have test cases even for 5.8.6 where at least some lines are duplicated >> but it doesn't matter in >> my case because i use syslog for monitoring/security only, not for >> accounting. > > :( The disadvantage of going directly from varnish to the remote > syslog server is that I lose the ability to store logs if the remote > syslog daemon is unavailable. Why do you think you get duplicates?
i don't know, i haven't looked into it yet. the test cases run different actions in different combinations, so i can't tell where the duplicates come from. there are only a few and i'm not sure i get them every time. but if varnish can log via syslog (as i understood it), why don't you let varnish log to a local rsyslogd directly without the detour via files? regards, -ap _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
