<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 11">
<meta name=Originator content="Microsoft Word 11">
<link rel=File-List href="cid:filelist.xml@01C67830.B0322F00">
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:ApplyBreakingRules/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:UseWord2002TableStyleRules/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" LatentStyleCount="156">
</w:LatentStyles>
</xml><![endif]-->
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
text-align:right;
mso-pagination:widow-orphan;
direction:rtl;
unicode-bidi:embed;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
span.EmailStyle17
{mso-style-type:personal-compose;
mso-style-noshow:yes;
mso-ansi-font-size:10.0pt;
mso-bidi-font-size:10.0pt;
font-family:Arial;
mso-ascii-font-family:Arial;
mso-hansi-font-family:Arial;
mso-bidi-font-family:Arial;
color:windowtext;}
span.SpellE
{mso-style-name:"";
mso-spl-e:yes;}
span.GramE
{mso-style-name:"";
mso-gram-e:yes;}
@page Section1
{size:595.3pt 841.9pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;
mso-gutter-direction:rtl;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:1766071496;
mso-list-type:hybrid;
mso-list-template-ids:-588227072 -600157342 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-text:%1-;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
</style>
<![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple style='tab-interval:36.0pt'>
<div class=Section1 dir=RTL>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Hi,<o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>I
have just installed <span class=SpellE>syslog-ng</span> on Redhat enterprise 4.<o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>I
am using it as remote logging server for a <span class=SpellE>syslog-ng</span>
client.<o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Here
is my remote logging configuration:<o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><span class=GramE><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>source</span></font></span><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'> <span class=SpellE>s_remote</span> {</span></font><font
size=2 face=Arial><span lang=AR-SA dir=RTL style='font-size:10.0pt;font-family:
Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><span dir=LTR></span><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'><span dir=LTR></span><span
style='mso-spacerun:yes'> </span><span
class=SpellE><span class=GramE>tcp</span></span><span class=GramE>(</span><span
class=SpellE>ip</span>(0.0.0.0) port(514));</span></font><font size=2
face=Arial><span lang=AR-SA dir=RTL style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><span dir=LTR></span><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'><span dir=LTR></span><span
style='mso-spacerun:yes'> </span><span
class=SpellE><span class=GramE>udp</span></span><span class=GramE>(</span><span
class=SpellE>ip</span>(0.0.0.0) port(514));</span></font><font size=2
face=Arial><span lang=AR-SA dir=RTL style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><span dir=LTR></span><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'><span dir=LTR></span>};</span></font><font size=2
face=Arial><span lang=AR-SA dir=RTL style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span lang=AR-SA dir=RTL style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><span class=GramE><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>destination</span></font></span><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'> <span class=SpellE>d_separatedbyhosts</span>
{</span></font><font size=2 face=Arial><span lang=AR-SA dir=RTL
style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><span dir=LTR></span><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'><span dir=LTR></span><span
style='mso-spacerun:yes'> </span><span
class=GramE>file(</span>"/<span class=SpellE>var/log/syslog-ng/$HOST/messages</span>"
owner("root") group("root") perm(0640) <span class=SpellE>dir_perm</span>(0750)
<span class=SpellE>create_dirs</span>(yes));</span></font><font size=2
face=Arial><span lang=AR-SA dir=RTL style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><span dir=LTR></span><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial'><span dir=LTR></span>};</span></font><font size=2
face=Arial><span lang=AR-SA dir=RTL style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span lang=AR-SA dir=RTL style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><span class=GramE><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>log</span></font></span><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'> { source(<span class=SpellE>s_remote</span>);
destination(<span class=SpellE>d_separatedbyhosts</span>); };<o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>I
am getting the following error message <span class=GramE>in <span
style='mso-spacerun:yes'> </span>/</span>var/log/syslog-ng.log on the same
machine using tail<o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>"<span
class=GramE>cannot</span> open file /var/log/syslog-ng/host1messages for
writing (Permission denied)"<o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>I
have tried to create the file myself and give it 777 permission along with all
the directories /<span class=SpellE>var</span>, /<span class=SpellE>var</span>/log,
/<span class=SpellE>var/log/syslog-ng</span><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>If
you notice here, <o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='margin-left:36.0pt;text-align:left;
text-indent:-18.0pt;mso-list:l0 level1 lfo1;tab-stops:list 36.0pt;direction:
ltr;unicode-bidi:embed'><![if !supportLists]><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial;mso-fareast-font-family:Arial'><span
style='mso-list:Ignore'>1-<font size=1 face="Times New Roman"><span
style='font:7.0pt "Times New Roman"'> </span></font></span></span></font><![endif]><span
dir=LTR><span class=SpellE><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>syslog-ng</span></font></span></span><font size=2
face=Arial><span style='font-size:10.0pt;font-family:Arial'> is writing error
messages from the same machine to /<span class=SpellE>var/log/syslog-ng</span>
which means <span class=SpellE>syslog-ng</span> is working well for local
logging on the same machine ( I have stopped <span class=SpellE>syslogd</span>).<o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='margin-left:36.0pt;text-align:left;
text-indent:-18.0pt;mso-list:l0 level1 lfo1;tab-stops:list 36.0pt;direction:
ltr;unicode-bidi:embed'><![if !supportLists]><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial;mso-fareast-font-family:Arial'><span
style='mso-list:Ignore'>2-<font size=1 face="Times New Roman"><span
style='font:7.0pt "Times New Roman"'> </span></font></span></span></font><![endif]><span
dir=LTR><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>The
error has a file name "host1messages" while in the configuration file
it is "/$HOST/messages"<o:p></o:p></span></font></span></p>
<p class=MsoNormal dir=LTR style='margin-left:36.0pt;text-align:left;
text-indent:-18.0pt;mso-list:l0 level1 lfo1;tab-stops:list 36.0pt;direction:
ltr;unicode-bidi:embed'><![if !supportLists]><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial;mso-fareast-font-family:Arial'><span
style='mso-list:Ignore'>3-<font size=1 face="Times New Roman"><span
style='font:7.0pt "Times New Roman"'> </span></font></span></span></font><![endif]><span
dir=LTR><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>I
am accessing the <span class=SpellE>syslog-ng</span> server using remote SSH
from windows using putty client. When I open the /var/log/syslog-ng.log file using
"vi" I got a strange character instead of "/" in the
previous error message between "host1" and "messages". While
- as you have seen above - using tail I do not get any character neither / nor
the strange one in the <span class=SpellE>syslog-ng</span> file.<o:p></o:p></span></font></span></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Kind
regards<o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=3 face="Times New Roman"><span style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal dir=RTL><font size=3 face="Times New Roman"><span dir=LTR
style='font-size:12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>