<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3527" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=966565114-05062009><FONT face=Arial
color=#0000ff size=2>That looks like a bind() error message which suggests that
another process is already listening on the socket in question. Use lsof to find
out which process that is.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=966565114-05062009><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=966565114-05062009><FONT face=Arial
color=#0000ff size=2># lsof
/var/log/apache2/ws8.mydomain.com-access_log</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> syslog-ng-bounces@lists.balabit.hu
[mailto:syslog-ng-bounces@lists.balabit.hu] <B>On Behalf Of </B>lance
raymond<BR><B>Sent:</B> 04 June 2009 18:11<BR><B>To:</B>
syslog-ng@lists.balabit.hu<BR><B>Subject:</B> [syslog-ng] New to syslog-ng,
basic setup help reuqested<BR></FONT><BR></DIV>
<DIV></DIV>Afternoon, looking to do some real basic logging for our
webservers. They are all running ubuntu-server 8.10, and I have a
standalone box which will act as the 'log server'. They have webmin
installed, so I setup using that as it seemed pretty straight forward.
<BR><BR>So the server is running and when I start one of the webservers which I
configured, I recive the following error;<BR> * Starting system logging
syslog-ng Error binding socket;
addr='AF_UNIX(/var/log/apache2/ws8.mydomain.com-access_log)', error='Address
already in use (98)'<BR><BR>I thought it might be due to apache running, so
stopped that, but still the same error.<BR><BR><BR>the conf file is HUGE, and
95% is a stock install, so I will just put what the client / server has that is
specific to this item I wish to remote log.<BR><BR>Client:<BR>destination
WFLogger {<BR> udp(192.168.2.60);<BR> };<BR>source domain_access
{<BR> unix-stream("/var/log/apache2/ws8.domain.com-access_log");<BR>
};<BR>log {<BR> source(domain_access);<BR>
destination(WFLogger);<BR> flags(catchall);<BR> };<BR><BR>On the
server, I don't see anything that stands out that say's "accept connections" so
not sure if there is anything special that has to be done, but the error on the
client is immediate so that part seems to be a local
issue.<BR><BR>Thanks<BR><BR></BODY></HTML>