[syslog-ng]Need help...with SYSLOG-NG

Nate Campi syslog-ng@lists.balabit.hu
Thu, 19 Jun 2003 16:58:15 -0700


On Thu, Jun 19, 2003 at 05:14:55PM -0400, R Saroukhanian wrote:
> > Hello folks,
> > 
> > Could somebody help me with this error message I am getting when trying to run SYSLOG-NG?
> > 
> > Error message:
> > No source refers to internal messages, they will go to /dev/null
> > unresolved reference:src
> > Error initializing configuration, exiting.
> > 
> > Here is my setup.
> > 
> > I installed syslog-ng version 1.6.0 r3 on my FreeBSD 4.8 box.
> > 
> > The overall plan is to collect log messages sent to by NTSyslog from a Windows 2000 box to SYSLOG-NG on the FreeBSD 4.8 box.
> > For a test I have been starting and stopping a telnet service on my Windows 2000 box to pick  up these events in the telnetlog file which I created on my FreeBSD computer.
> > 
> > Both syslog-ng and syslog-ng.conf file are located in /etc of the FreeBSD box.
> > 
> > I am logged in as root.
> > 
> > syslog.conf file looks like this:
> > 
> > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
> > options {sync(0); };
> > 
> > source src_udp {udp(10.101.54.2) port(514); };
> > 
> > destination telnet_d {file ("/var/log/telnetlog"); } ;
> > 
> > log {source (src_udp);  destination (telnet_t); };
> > 
> > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

I didn't address the error that makes syslog-ng exit, how lame of me :(

Here's what I think you want out of syslog-ng:

####################################################
 options { sync(0); };

 source src_udp {
			udp(10.101.54.2) port(514);
			internal;
 };

 destination telnet_d { file ("/var/log/telnetlog"); } ;

 log {
	source (src);
	destination (telnet_d);
 };
####################################################

I fixed the differing destination name, and make your source name
consistent, and added the internal source. This should at least get your
basic setup working.

Sorry I didn't pay more attention the first time.
-- 
Nate Campi    http://www.campin.net