[syslog-ng]Playing "catchup"...

[Ed Walker]

Thought of this just after sending that last message....

In the event that SQL injection dies on the central loghost, we've thought
of keeping a copy in a file as well.

And if, for some reason, syslog-ng on the central server dies, or
connectivity is lost, we're already keeping a copy of the logging data on
each remote server.

So, what's the best way to play "catch up" when something dies, and making
it as easy as possible to import the missed data, without accidentally
introducing duplication?

Any ideas?

Thanks-

Ed