logrotate exists abnormally with duplicate log entry for /var/log/acpid

This document (7003176) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 10 Service Pack 4

Situation

After updating to klogd-1.4.1-559.24.1 logrotate exists with:

sles10:/etc/cron.daily # ./logrotate
error: syslog-ng:11 duplicate log entry for /var/log/acpid
sles10:/etc/cron.daily #

The following error is noticed in /var/log/messages:

Feb 7 14:58:25 sles10 logrotate: ALERT exited abnormally with [1]
Feb 7 14:58:25 sles10 logrotate: error: syslog-ng:11 duplicate log entry for /var/log/acpid

Resolution

Please delete /etc/logrotate.d/syslog-ng and reload /etc/init.d/syslog.
This issue gets addressed with syslog-ng-1.6.8-20.23.1 or later.

Cause

This issue is caused by duplicate entries in /etc/logrotate.d/syslog and /etc/logrotate.d/syslog-ng. Both files come from different packages (syslog = klogd, syslog-ng = syslog-ng) and thus caused these duplicate entries. Deleting /etc/logrotate.d/syslog-ng is the preferred solution.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.