[SOLVED]problems with syslog-ng after recent update

Question

system i686 fully updatet today.
package version: syslog-ng 3.0.4-3
roor when running logrotate:
error: syslog-ng:1 duplicate log entry for /var/log/crond.log                 
error: found error in /var/log/messages.log /var/log/auth.log /var/log/mail.log /var/log/kernel.log /var/log/errors.log /var/log/daemon.log /var/log/user.log /var/log/iptables.log /var/log/everything.log /var/log/syslog.log /var/log/acpid.log /var/log/crond.log /var/log/lpr.log /var/log/uucp.log /var/log/news.log /var/log/ppp.log /var/log/debug.log , skipping                                                                               
error: syslog.ng:1 duplicate log entry for /var/log/messages.log                                             
error: found error in /var/log/messages.log /var/log/auth.log /var/log/mail.log /var/log/kernel.log /var/log/errors.log /var/log/daemon.log /var/log/user.log /var/log/iptables.log /var/log/everything.log /var/log/syslog.log  , skipping                                                                                               
error: stat of /var/log/mail.log failed: No such file or directory
downgrading does not help.
Last edited by broch (2010-02-28 00:12:29)

Answer 1

I bet the crond.log error is because you still have a /etc/logrotate.d/crond file. That was supposed to be removed with the latest package release of dcron (v4.4-2), have you also upgraded that?
The messages.log error I don't know about. It looks like logrotate is using both the old version of /etc/logrotate.d/syslog-ng and the new version. Do you perhaps have a .pacsave or .pacnew file in that folder that you haven't yet merged? Perhaps logrotate is trying to parse that too.