When using the kafka() destination driver Syslog-ng generates a lot of core dump files which fill the disk and Syslog-ng eventually stops working.
Product Defect
Workaround 1:
Disable the disk buffer if not required.
Workaround 2:
Add a file("/dev/null") destination to the problematic destination definition, that will mitigate the problem, while leaving the disk queue in place.
See example below (highlighted):
+++++++++++++++++++++++
destination d_kafka {
kafka(
client-lib-dir("/opt/syslog-ng/etc/kafka_2.11-2.1.1/libs")
kafka-bootstrap-servers("prd01.prd.domain.org:6688,prd02.domain.org:6688)
topic("${.kafka.topic.name}")
disk-buffer(
reliable(no)
dir("/data/buffer/")
)
);
file("/dev/null");
};
+++++++++++++++++++++++
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center