Frédéric Massot wrote: > Michael Biebl a écrit : >> Rainer Gerhards wrote: >>> The reason is "because this is the way it was always done" and rsyslog is >>> compatible to the past. >> Agreed, closing it as not-a-bug. >> >> There is basically no point in writing mark messages if you have regular >> syslog >> messages. > > Hi, > > Thank you for your responses. > > If you look at the extract from the log file "messages", you see that > there would be a mark to 1h17. But there was none.
Right, because there was a regular syslog message in between. Afaik, the mark messages work this way: Whenever you receive a regular syslog message (doesn't matter into which log file they go), the mark counter is reset. So only if you do not receive any regular syslog messages, you get mark messages in a regular 20 min intervall. > I have provided the log file "syslog" to show that rsyslog running and > that there was no problem to write on the hard disk. > > And at 1h17 there were entries in the file "syslog" and no mark in the > file "messages": > > Aug 2 01:17:01 yuggoth /USR/SBIN/CRON[17604]: (root) CMD ( cd / && > run-parts --report /etc/cron.hourly) > Aug 2 01:17:03 yuggoth hddtemp[2900]: /dev/sda: MAXTOR STM3320613AS: 39 C > Aug 2 01:17:03 yuggoth hddtemp[2900]: /dev/sdb: MAXTOR STM3320613AS: 44 C > Aug 2 01:17:03 yuggoth hddtemp[2900]: /dev/sdc: MAXTOR STM3320613AS: 39 C > Aug 2 01:17:03 yuggoth hddtemp[2900]: /dev/sdd: Maxtor 6V300F0: 47 C > > > I have perhaps not been precise enough in my first post, and writing the > marks every 20 minutes unconditionally was a suggestion. > > But I think, there would be a mark at 1h17. The point of the mark messages is, that in case of a failure you can check if the syslog daemon was still operational during that time and able to write messages. As already said, it is no point to write mark messages if you have regular syslog messages, as this would only be unnecessary noise in the log files. It seems, the only reason why you want such a regular mark message, is to make your watchdog daemon work. But maybe this is just the wrong approach. Why don't you generate a a syslog message yourself and check if it shows up in the logs within a given timeframe? Cheers, Michael -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature
