Conversation

When you setup logging on an old system and immediately see piles of errors from the webserver, do nothing and relax 🍹 .

Just wait for syslog-ng to finish processing the error log, random logs here and there that contains hundreds of megabytes of deprecated data, and then decide to proceed with the access logs.

Access and error logs in different files means your data is incomplete (thus inconsistent for some use cases) until syslog-ng has catched-up with all the logs it had to process.