Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
syslog-ng MARK'ing in GMT!
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Duplicate Threads
View previous topic :: View next topic  
Author Message
blueflame
Tux's lil' helper
Tux's lil' helper


Joined: 26 Nov 2006
Posts: 107
Location: Singapore

PostPosted: Thu Jan 10, 2008 12:36 pm    Post subject: syslog-ng MARK'ing in GMT! Reply with quote

Weird I know, but my syslog is MARK'ing in GMT:
Quote:

Jan 10 00:10:37 theseus -- MARK --
Jan 10 00:30:37 theseus -- MARK --
Jan 10 00:50:37 theseus -- MARK --
Jan 10 01:10:37 theseus -- MARK --
Jan 10 01:30:37 theseus -- MARK --
Jan 10 01:50:37 theseus -- MARK --
Jan 10 09:53:44 theseus syslog-ng[4414]: Log statistics; processed='center(queue
d)=1088', processed='center(received)=544', processed='destination(messages)=544
', processed='destination(console_all)=544', processed='source(src)=544'
Jan 10 02:13:43 theseus -- MARK --
Jan 10 02:33:43 theseus -- MARK --
Jan 10 02:53:43 theseus -- MARK --
Jan 10 03:13:43 theseus -- MARK --
Jan 10 03:33:43 theseus -- MARK --
Jan 10 03:53:43 theseus -- MARK --


The entry of "Jan 10 09:53:44" is the actual system time that would be displayed by the 'date' command. Strangely enough the timestamp on the stats entry by syslog is correct, but not the MARK entries.

I have:
Code:

*  app-admin/syslog-ng
      Latest version available: 2.0.6
      Latest version installed: 2.0.6
      Size of files: 360 kB
      Homepage:      http://www.balabit.com/products/syslog_ng/
      Description:   syslog replacement with advanced filtering features
      License:       GPL-2


I've turned off MARK'ing with mark_freq(0) for now.

Anyone else seeing this?
Back to top
View user's profile Send private message
grimm26
Guru
Guru


Joined: 23 May 2004
Posts: 302
Location: Chicagoland, IL

PostPosted: Thu Jan 10, 2008 9:00 pm    Post subject: Reply with quote

Yep, same thing happens to me in testing it. Firstly, the feature is marked as obsoleted. See http://www.balabit.com/dl/html/syslog-ng-admin-guide_en.html/ch08s06.html for info on all global options. Secondly, what's the point?
_________________
"Blessed is he who finds happiness in his own foolishness, for he will always be happy".
Back to top
View user's profile Send private message
blueflame
Tux's lil' helper
Tux's lil' helper


Joined: 26 Nov 2006
Posts: 107
Location: Singapore

PostPosted: Fri Jan 11, 2008 6:40 am    Post subject: Reply with quote

I've found that MARK is only ever useful for working out roughly what time your system hangs, usually caused by a hardware failure - disk crash for example. Other than that MARK does seem a bit useless.
Back to top
View user's profile Send private message
desultory
Administrator
Administrator


Joined: 04 Nov 2005
Posts: 7818

PostPosted: Mon Mar 03, 2008 8:58 am    Post subject: Reply with quote

Moved from Other Things Gentoo to Duplicate Threads, refer to topic "Strange `--MARK--`".
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Duplicate Threads All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum