Re: [gentoo-user] Syslog-ng "Failed to seek to the Cursor"

[Fernando Rodriguez <frodriguez.developer@outlook.com>]

On Wednesday, September 16, 2015 8:52:21 PM Helmut Jarausch wrote:
> On 09/16/2015 06:55:00 PM, Alan McKinnon wrote:
> > On 16/09/2015 17:57, Helmut Jarausch wrote:
> > > I have syslog-ng-3.7.1 installed here.
> > > Syslog-ng fails to start with the message:
> > > Failed to seek to the Cursor cursor='', error='Success (0)'
> > >
> > > Does anybody know what's happening?
> > >
> > > Many thanks for a hint,
> > > Helmut
> > >
> > >
> > 
> > 
> > It has something to do with systemd's log thingy.
> > 
> > The error only appears in one place in the syslog-ng source,
> > in modules/systemd-journal/journal-reader.c:
> > 
> > static inline gboolean
> > __seek_to_saved_state(JournalReader *self)
> > {
> >   JournalReaderState *state =
> > persist_state_map_entry(self->persist_state, self->persist_handle);
> >   gint rc = journald_seek_cursor(self->journal, state->cursor);
> >   persist_state_unmap_entry(self->persist_state,
> > self->persist_handle);
> >   if (rc != 0)
> >     {
> >       msg_warning("Failed to seek to the cursor",
> >           evt_tag_str("cursor", state->cursor),
> >           evt_tag_errno("error", errno),
> >           NULL);
> >       return __seek_to_head(self);
> >     }
> >   journald_next(self->journal);
> >   return TRUE;
> > }
> > 
> > 
> > First step would appear to be to check systemd's built-in log thingy
> > 
> 
> Thanks Alan,
> 
> but how to do that. I have systemd installed here but I haven't ever used it 
since I'm using openrc.
> So, what can I do?
> 
> Thanks,
> Helmut
> 
> 

Look for file named syslog-ng.persist somewhere in /var and delete it, then try 
restarting syslog-ng.

I also recommend you start playing with journalctl. I hated it for a while but 
mostly because I didn't knew how to use it. Now I love it and got rid of 
syslog-ng.

-- 
Fernando Rodriguez