Return
-
Title
Large queue file shows negative size with dqtool. Recovering corrupt disk queues -
Description
The disk queue files (.qf or .rqf) can become corrupt and we created a tool to recover those. Use the command /opt/syslog-ng/bin/dqtool info NAME_of_QUEUE_FILE command to look at queue file. If the file shows a negative size it is corrupt. -
Cause
CAUSE 1: The queue files can become corrupt due to a various reasons, like a bad block on a disk or syslog-ng could not write the queue file to the disk properly.
CAUSE2: Product Defect
-
Resolution
RESOLUTION:
Use the attached Guide and the dqread tool to recover the corrupt disk queues and resend the logs using syslog-ng.
DISCLAIMER:The dqread tool is officially not supported and we give it to customer as a sign of our goodwill to help them recover the files.We cannot guarantee that it can recover all log messages and whether there will be no log loss or log duplication.RESOLUTION 2:
Upgrade to 6.0.15 on the syslog-ng relays.
-
Attachments