|  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Request #52052 add syslog support to FPM
Submitted: 2010-06-11 18:10 UTC Modified: 2011-10-08 20:03 UTC
Avg. Score:4.3 ± 0.5
Reproduced:3 of 3 (100.0%)
Same Version:0 (0.0%)
Same OS:3 (100.0%)
From: ef-lists at email dot de Assigned: fat (profile)
Status: Closed Package: FPM related
PHP Version: 5.3SVN-2010-06-11 (SVN) OS: Linux/*NIX
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
Block user comment
Status: Assign to:
Bug Type:
From: ef-lists at email dot de
New email:
PHP Version: OS:


 [2010-06-11 18:10 UTC] ef-lists at email dot de
At current, FPM only allows logging to local files, both for the ErrorLog and SlowLog.

Using syslog aids the administrator greatly in centralizing logfiles.
Also PHP itself has syslog support, so FPM should consequently have it, too.

I hereby ask to add syslog support to FPM.


fpm-syslog.v5.patch (last revision 2011-01-28 14:48 UTC by ef-lists at email dot de)
fpm-syslog.v4.patch (last revision 2010-07-07 10:14 UTC by ef-lists at email dot de)
fpm-syslog.v3.patch (last revision 2010-06-13 09:03 UTC by
fpm-syslog.v2.patch (last revision 2010-06-13 08:36 UTC by
fpm-syslog.v1.patch (last revision 2010-06-12 16:47 UTC by

Add a Patch

Pull Requests

Add a Pull Request


AllCommentsChangesGit/SVN commitsRelated reports
 [2010-06-12 10:17 UTC]
-Status: Open +Status: Assigned -Assigned To: +Assigned To: fat
 [2010-06-12 18:47 UTC]
The following patch has been added/updated:

Patch Name: fpm-syslog.v1.patch
Revision:   1276361235
 [2010-06-12 18:49 UTC]
The attached patch should activate syslog sypport to error_log only. You can try 
it on trunk.

change error_log to "syslog"

You can also set
syslog_facility and syslog_ident to feet your needs. But default values should 
be OK.

I'm working on the slowlog patch also but it's a bit more complicated.
++ Jerome
 [2010-06-12 19:54 UTC] ef-lists at email dot de
Great job! :-)

I'll try it out and report feedback to you.
 [2010-06-13 10:36 UTC]
The following patch has been added/updated:

Patch Name: fpm-syslog.v2.patch
Revision:   1276418186
 [2010-06-13 10:41 UTC]
You can try instead the new revision of the patch I've just attached.

It adds sending slowlog to syslog.

Set slowlog to syslog. Moreover you can set slowlog_syslog_level to same values as 
log_level. By default it's LOG_DEBUG. There is no way to change the ident and the 
facility for slowlog, it takes the same values as the globals ones 
(syslog_facility and syslog_event). There is no need to because the pool name is 
prepended to every slowlog message.
 [2010-06-13 11:03 UTC]
The following patch has been added/updated:

Patch Name: fpm-syslog.v3.patch
Revision:   1276419780
 [2010-06-13 11:03 UTC]
my mistakes. The v2 patch was buggy. Use v3 instead.
 [2010-07-07 12:27 UTC] ef-lists at email dot de
Sorry it took me so long to reply. Too much work and too few spare time.

Netherless I reviewed the patch and fixed some problems.

If trace failed in fpm_php_trace.c:fpm_php_trace, there was a call to fwrite with a NULL pointer. Added syslog here.

In fpm_stdio.c:fpm_stdio_init_child a close was performed on the fd set to ZLOG_SYSLOG. (valgrind complained)

In fpm_stio.c:fpm_stdio_open_error_log, the variable syslog shadowed syslog() - renamed it to syslog_opened. It didn't matter from the code's point of view, but I think shadowing is a bad thing and renaming avoids it and also doesn't emit a warning, if you compile with -Wshadow.

In was a typo (syslog_syslog_level -> slowlog_syslog_level).

Four more questions regarding the patch:
Is there a particular reason, why the facility names are partially compared with strcasecmp and strcmp? I found it confusing, that I have to type LOCAL6 instead of local6.

When looking at php_syslog.h - for maximum portability, shouldn't the syslog() calls be changed to php_syslog()?

I'm unsure - but aren't we losing messages from libevent written to stderr in the master process? I think one could use the fpm event system, to catch stderr, but didn't investigate further yet.

Are you planning to integrate this patch into SVN?

Oh and besides the issues I mentioned - the patch works fine for me. :-)

 [2010-07-07 13:17 UTC]
Thanks for the reporting. I'll check that and answer you as soon as possible.
 [2010-07-22 23:37 UTC]
some answers to your questions:

1- this is a bug. All comparaison should use strcasecmp so that users can type 
facilities and log level with the case they want.

2- you're right. php_syslog() should be used instead of syslog()

4- after testing and validating, yes of course.

I need to take time reviewing all this. Thx again !
 [2011-01-12 16:15 UTC] ef-lists at email dot de
Hi Jerome,

are there any updates on this issue yet? With PHP 5.3.4 and PHP 5.3.5 the latest patch doesn't work anymore.

I'd be willing to port it to the latest release, if you're interested. I'd still like to see this integrated into trunk and 5.3.X.

 [2011-01-28 15:53 UTC] ef-lists at email dot de

added a new patch, which can be applied to a vanilla PHP 5.3.5.

compiles and runs with:
--enable-debug without relevant warnings
without other flags
with having HAVE_SYSLOG_H in main/php_config.h undefined

* modified patch to work with FPM in 5.3.5
* added new parameters to config dump (todo: translate syslog prio and facility to nice human-readable values)
* made comparing syslog facilities case-insensitive
* replaced syslog() calls with php_syslog()

 [2011-01-29 15:46 UTC]
thx for the up to date patch. But there is still a remaining problem:

php_syslog(), openlog() and closelog() can be called from FPM code, core code, 
user script, module, sapi, ... 

If two calls to openlog() are made from two different places. Then this is not 
sure than php_syslog() will log the right ident and facility.

This a global reflection to make around PHP and not only in FPM.

I'm working on it.
 [2011-02-10 07:58 UTC] ef-lists at email dot de
Oh you're right. We're actually experiencing this issue here.

At least the master process should always log to the configured ident/facility - that's configuration and process manager warnings/errors. By far the most important log output from FPM, IMHO.

I don't think this is a critical issue for FPM, as log output is never discarded and other sapis (milter, thttpd, mod_php with Apache ErrorLog set to syslog) do it the same way - although it would be nice to see this resolved. I still wonder how to properly do this... open a separate socket and mimic syslog behaviour? How to address this on Windows?

If you have updates, I'd be really curious. If I can help, let me know. :-)
 [2011-02-15 19:42 UTC] kyle_leaders at mcgraw-hill dot com
As a small fix to this, I just noticed that in 5.3.5, PHP-FPM logs correctly to 
the syslog, but the syslog tag is incorrect.

If for example you have a pool named "www" it will log to syslog like so:
2011-02-15 13:28:09.172141-05:00 hostname w: PHP Warning:  ocierror() expects 
parameter 1 to be resource, null given in filename.php on line 177

Similarly if you have a longer pool name (poolname) it'll show up like so:
2011-02-15 13:28:09.172141-05:00 hostname olname: PHP Warning:  ocierror() 
expects parameter 1 to be resource, null given in filename.php on line 177

It seems to be chopping off the first 2 characters of the pool name when it 
reports the syslog tag/program name to syslog.
 [2011-02-15 21:34 UTC] php at mike2k dot com
I would log everything under a consistent ident/facility myself.

Then you have all FPM stuff coming in one stream. If you want to split it up then 
you can use filters inside of whatever syslog tools you use.

 [2011-04-12 02:17 UTC] mark at catseye dot org
I tried this out in a development snapshot for PHP 5.3.7, but found that calls to zlog() from children were not showing up in syslog.

The following change fixes the problem; let me know if you'd like me to upload a new version of the patch.

diff -up php-snap/sapi/fpm/fpm/fpm_stdio.c.syslog php-snap/sapi/fpm/fpm/fpm_st
--- php-snap/sapi/fpm/fpm/fpm_stdio.c.syslog  2011-04-11 19:10:17.425036568 -0
+++ php-snap/sapi/fpm/fpm/fpm_stdio.c   2011-04-11 19:10:24.569131370 -0400
@@ -64,9 +64,9 @@ int fpm_stdio_init_child(struct fpm_work
+               fpm_globals.error_log_fd = -1;
+               zlog_set_fd(-1);
-       fpm_globals.error_log_fd = -1;
-       zlog_set_fd(-1);
        if (wp->listening_socket != STDIN_FILENO) {
                if (0 > dup2(wp->listening_socket, STDIN_FILENO)) {
 [2011-07-05 13:15 UTC]
to allow syslog on children, we'll have to wait until is closed.
 [2011-07-05 15:22 UTC]
Automatic comment from SVN on behalf of fat
Log: - FR #52052: Added partial syslog support (on error_log only)
 [2011-07-05 15:25 UTC]
I've just commit a partial syslog support to 5.4 branch and trunk:

I'll wait 5.3.7 is out before backporting this to 5.3 branch.

it's only a partial syslog support as only error_log can use syslog. Slowlog patch 
must wait for bug #51118 to be closed.
 [2011-07-05 17:07 UTC]
-Status: Assigned +Status: Suspended
 [2011-07-05 17:07 UTC]
-Status: Suspended +Status: Analyzed
 [2011-10-08 13:34 UTC]
Automatic comment from SVN on behalf of fat
Log: - Backported FR #52052 from 5.4 branch (Added partial syslog support)
 [2011-10-08 20:03 UTC]
This bug has been fixed in SVN.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at

 For Windows:
Thank you for the report, and for helping us make PHP better.

As nobody cares about syslog on PHP, I won't spend some more time with this. 
Sorry. I've done everyhting I could and it will stay this way unless someone 
starts to care about syslog support into core.

++ fat
 [2011-10-08 20:03 UTC]
-Status: Analyzed +Status: Closed
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sun Jul 21 13:01:28 2024 UTC