The syslog-ng 3.0 Administrator Guide

Procedure 3.19.1.1. Creating syslog-ng core files

1. Core files are produced only if the maximum core file size ulimit is set to a high value in the init script of syslog-ng. Add the following line to the init script of syslog-ng:

   ulimit -c unlimited

2. Verify that syslog-ng has permissions to write the directory it is started from, e.g., /opt/syslog-ng/sbin/.

3. If syslog-ng crashes, it will create a core file in the directory syslog-ng was started from.

4. To test that syslog-ng can create a core file, you can create a crash manually. For this, determine the PID of syslog-ng (e.g., using the ps -All|grep syslog-ng command), then issue the following command: kill -ABRT <syslog-ng pid>

   This should create a core file in the current working directory.