sporadic logging of remote syslog messages

[Gernreich]

I have source udp();  set up to log to a local file destination, no filter is being used.  The general network traffic is low to this syslog-ng server.  What I see happening is that out of twenty or so identical syslog messages (sent as a test, one per second) only one or two are making it to the file.  I used tcpdump and wireshark to be sure that the syslogs were reaching my network card. They are.  What is stumping me is why only around 5% are making it to the file.

Thanks!

[Admin]

What version of syslog-ng are you using?

[Admin]

Also, are you seeing any STATS messages in the log file?

[Gernreich]

Version 1.3.7 on a SuSe box

[Gernreich]

I am seeing a great number of the STATS messages on the server that has a much higher network load.  On the test server with a low network load I am not seeing any.  So Perhaps that is the issue?

[Gernreich]

I am logging to a file on the hard drive, not a pipe however.

[Gernreich]

I just got a STATS: dropped 2630

[Admin]

Interesting... 

Try adding log_fifo_size(1000); to the options {}; section.  Also, you may want to try upgrading to a recent version - 1.3.7 is quite old and may well have some bugs.

[Gernreich]

Thank for the advice, I will do so!