<br>Yea I am.... gasp.. I tried rolling from source but got a slew of compile errors.<br><br>-Chuck<br><br><div class="gmail_quote">On Fri, Jul 30, 2010 at 12:38 AM, Zoltán Pallagi <span dir="ltr"><<a href="mailto:pzolee@balabit.hu">pzolee@balabit.hu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div bgcolor="#ffffff" text="#000000">
Hi,<br>
<br>
I think you are using syslog-ng without sql support.<br>
Execute "syslog-ng -V" command to check it.<br>
You should see the following line:<br>
"Enable-SQL: on"<br>
<br>
If Enable-SQL is off, you should recompile syslog-ng with sql support<div><div></div><div class="h5"><br>
<br>
On 2010-07-29 20:29, Chuck wrote:
</div></div><blockquote type="cite"><div><div></div><div class="h5"><br>
I am trying to log to mysql. I am running syslog-ng 3.0.4 on Solaris 10
Update 8.<br>
<br>
I have the following stanza in syslog-ng.conf:<br>
<span style="font-family: courier new,monospace;">destination r_mysql
{</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> sql(type(mysql)</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> host("localhost")
username("syslog") password("xxxxxxx")</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> database("syslog")</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">
table("messages_${HOST}_${R_YEAR}${R_MONTH}${R_DAY}")</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">
columns("datetime", "host", "program", "pid", "message")</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> values("$R_DATE",
"$HOST", "$PROGRAM", "$PID", "$MSGONLY")</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">
indexes("datetime", "host", "program", "pid", "message"));</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> };</span><br>
<br>
It is complaining about the syntax.. Anyone have any ideas?<br>
<br>
Thx<br>
</div></div><pre><fieldset></fieldset>
______________________________________________________________________________
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><div class="im">
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a>
</div></pre>
</blockquote>
<br>
</div>
</blockquote></div><br>