[grsec] Message logs

[John Logsdon]

I have syslog-ng filtering out my grsec logs to /var/log/grsec/grsec.log -
with log rotation etc.  Console logs can be views over VNC via the
engineering port but I want to see them in real files as well.

But I notice that the logs are not written immediately - certainly the
VNC output is reasonably quick so if I was crouching on the floor by the
server, I would get them immediately.

In particular, I seem to need to restart syslog-ng to flush the
information out then it gets written with the wrong time stamp.

Does anyone else have this problem or can suggest a solution?  We need to
know of violations as soon as they occur.

Or is there a different solution?

TIA

John

John Logsdon                               "Try to make things as simple
Quantex Research Ltd, Manchester UK         as possible but not simpler"
j.logsdon at quantex-research.com              a.einstein at relativity.org
+44(0)161 445 4951/G:+44(0)7717758675       www.quantex-research.com