Arch Linux

broch

Banned

From: L.A. California

Registered: 2006-11-13

Posts: 975

[SOLVED]problems with syslog-ng after recent update

system i686 fully updatet today.

package version: syslog-ng 3.0.4-3

roor when running logrotate:

error: syslog-ng:1 duplicate log entry for /var/log/crond.log                 
error: found error in /var/log/messages.log /var/log/auth.log /var/log/mail.log /var/log/kernel.log /var/log/errors.log /var/log/daemon.log /var/log/user.log /var/log/iptables.log /var/log/everything.log /var/log/syslog.log /var/log/acpid.log /var/log/crond.log /var/log/lpr.log /var/log/uucp.log /var/log/news.log /var/log/ppp.log /var/log/debug.log , skipping                                                                               
error: syslog.ng:1 duplicate log entry for /var/log/messages.log                                             
error: found error in /var/log/messages.log /var/log/auth.log /var/log/mail.log /var/log/kernel.log /var/log/errors.log /var/log/daemon.log /var/log/user.log /var/log/iptables.log /var/log/everything.log /var/log/syslog.log  , skipping                                                                                               
error: stat of /var/log/mail.log failed: No such file or directory

downgrading does not help.

Last edited by broch (2010-02-28 00:12:29)

Profjim

Member

From: NYC

Registered: 2008-03-24

Posts: 658

Re: [SOLVED]problems with syslog-ng after recent update

Can you post the results of these commands?

dump() {
    echo $* >> ~/report.log
    $* &>> ~/report.log
    echo >> ~/report.log
}

dump cat /etc/logrotate.conf
dump ls /etc/logrotate.d
dump cat /etc/logrotate.d/syslog-ng
dump ls /var/log

Profjim

Member

From: NYC

Registered: 2008-03-24

Posts: 658

Re: [SOLVED]problems with syslog-ng after recent update

I bet the crond.log error is because you still have a /etc/logrotate.d/crond file. That was supposed to be removed with the latest package release of dcron (v4.4-2), have you also upgraded that?

The messages.log error I don't know about. It looks like logrotate is using both the old version of /etc/logrotate.d/syslog-ng and the new version. Do you perhaps have a .pacsave or .pacnew file in that folder that you haven't yet merged? Perhaps logrotate is trying to parse that too.

broch

Banned

From: L.A. California

Registered: 2006-11-13

Posts: 975

Re: [SOLVED]problems with syslog-ng after recent update

thanks,
I did full upgrade pacman -Syu
but crond was left in /etc/logrotate.d
I also had syslog-ng.pacnew

cleaning these fixed problem.