dqtool - Display the contents of a disk-buffer file created with syslog-ng OSE.

SYNOPSIS

dqtool [command] [options]

DESCRIPTION

NOTE: The dqtool application is distributed with the syslog-ng OSE system logging application, and is usually part of the syslog-ng OSE package. The latest version of the syslog-ng OSE application is available at the syslog-ng OSE page.

This manual page is only an abstract.

The dqtool application is a utility that can be used to display and format the messages stored in a disk-buffer file.

THE CAT COMMAND

cat [options] [file]

Use the cat command to display the log messages stored in the disk-buffer (also called disk-queue) file, and also information from the header of the disk queue file.

The cat command has the following options:

--debug or -d Print diagnostic and debugging messages to stderr.

--help or -h Display a brief help message.

--template=<template> or -t Format the messages using the specified template.

--verbose or -v Print verbose messages to stderr.

--version or -V Display version information.

EXAMPLES

dqtool cat ../var/syslog-ng-00000.qf

The output looks like:

Disk-buffer state loaded;
filename='../var/syslog-ng-00000.qf', qout_length='65', qbacklog_length='0', qoverflow_length='9205', qdisk_length='0'
Mar  3 10:52:05 tristram localprg[1234]: seq: 0000011630, runid: 1267609923, stamp: 2010-03-03T10:52:05 PADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADD
Mar  3 10:52:05 tristram localprg[1234]: seq: 0000011631, runid: 1267609923, stamp: 2010-03-03T10:52:05 PADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADDPADD

The messages are printed to the standard output (stdout), so it is possible to use grep and other tools to find particular log messages, for example

dqtool cat /var/log/messages.lgs | grep 192.168.1.1

THE RELOCATE COMMAND

relocate [options] [files]

Use the relocate command to move or rename disk-buffer (also called disk-queue) files. Note that this option modifies the persist file. Stop syslog-ng OSE before using this command.

The relocate command has the following options:

--all or -a Relocate every disk-buffer file that is listed in the syslog-ng OSE persist file.

--new_path or -n The directory where you want to move the disk-bufffer files. For example: /var/disk-buffers

--persist or -p The path to the syslog-ng OSE persist file. The relocate command automatically updates the entries of the disk-buffer files in the persist file.

EXAMPLES

Relocate a single queue file:

dqtool relocate --new_path /tmp/dq --persist var/syslog-ng.persist /tmp/syslog-ng-00000.rqf

Relocate multiple queue files:

dqtool relocate --new_path /tmp/dq --persist var/syslog-ng.persist /tmp/syslog-ng-00000.rqf /tmp/syslog-ng-00001.rqf

Relocate every queue file:

dqtool relocate --new_path /tmp/dq --persist var/syslog-ng.persist --all

FILES

/opt/syslog-ng/bin/dqtool

NOTE: If you experience any problems or need help with syslog-ng OSE, see the syslog-ng OSE Administration Guide[1], or visit the syslog-ng OSE mailing list[2]. For news and notifications about syslog-ng OSE, visit the syslog-ng OSE blogs[3].

AUTHOR

This manual page was generated from the syslog-ng OSE Administration Guide[1], which was written by several contributors to whom we’d like to extend our sincere thanks.

NOTES

[1] syslog-ng OSE Administration Guide https://syslog-ng.github.io/admin-guide/README

[2] syslog-ng OSE mailing list https://lists.balabit.hu/mailman/listinfo/syslog-ng

[3] syslog-ng OSE blogs https://syslog-ng.com/blog/

Updated: