<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3562" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=926005215-15072009>> </SPAN>the reload
fails, giving no kind of warning or message whatsoever </DIV>
<DIV> </DIV>
<DIV><SPAN class=926005215-15072009></SPAN><SPAN
class=926005215-15072009>S</SPAN><SPAN class=926005215-15072009>o in what sense
does it fail?</SPAN><BR></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> syslog-ng-bounces@lists.balabit.hu
[mailto:syslog-ng-bounces@lists.balabit.hu] <B>On Behalf Of </B>Andy
Kannberg<BR><B>Sent:</B> 15 July 2009 15:45<BR><B>To:</B>
syslog-ng@lists.balabit.hu<BR><B>Subject:</B> [syslog-ng] Another beginners
problem<BR></FONT><BR></DIV>
<DIV></DIV>Hi folks,<BR><BR>I'm new to syslog-ng. I'm trying to get it running
on a bunch of Ubuntu 8.04 LTS and OEL 5.3 systems.<BR>For a start, I'm trying to
get it working on 2 Ubuntu 8.04 LTS boxes. <BR>What I want is that all logging
of all systems is sent to a central loghost. Systems do not need to keep a local
logfile. <BR><BR>So, I've shamelesly copied over a (as said working) config from
another thread a few days ago on this list. <BR>The client part works, at least,
the reload goed ok. However, on the server, the reload fails, giving no kind of
warning or message whatsoever to hint where the problem lies.<BR><BR>The
configuration is as follows (With thanks to Siem Korteweg, from whom I copied
the config over). <BR><BR>Client & server:<BR><BR>source s_internal {
internal(); };<BR><BR>destination d_syslogng_log {
file("/var/log/syslog-ng.log"); };<BR><BR>source s_local
{<BR>
unix-dgram("/dev/log");<BR>
file("/proc/kmsg"
program_override("kernel:"));<BR>
};<BR><BR>destination d_remote { tcp("10.0.13.152" port(514) ) ;
};<BR><BR>destination d_local { file("/var/log/messages"); };<BR><BR>log {
source( s_internal ); destination( d_remote ); };<BR>log
{ source( s_internal ); destination( d_syslogng_log );
};<BR>log { source( s_local );
destination( d_remote ); };<BR>log { source( s_local
); destination( d_local );
};<BR><BR><BR>On the central loghost, adittional lines are added:<BR><BR>source
s_network { tcp (ip("10.0.13.152") port(514)); };<BR><BR>destination
d_network {
file("/var/log/syslog-ng/hosts/$HOST_FROM/$R_YEAR/$R_MONTH/$R_YEAR-$R_MONTH-$R_DAY"
create_dirs(yes)); };<BR>log { source( s_network
); destination( d_network ); };<BR><BR>But, as
said, a reload fails. Can someone help me out a little ? <BR>Oh, I am running
syslog-ng 3.03, installed from the .deb package available on the website of
Balabit.<BR><BR>cheers and thanks in advance. <BR><BR>Andy<BR><BR></BODY></HTML>