Hi thanks for replying Robert, I did use the --enable-sql switch when compiling from source, following is the output of syslog-ng --version:<div><br></div><div><div>syslog-ng --version</div><div>syslog-ng 3.2.2</div><div>Installer-Version: 3.2.2</div>
<div>Revision: ssh+git://bazsi@git.balabit//var/scm/git/syslog-ng/syslog-ng-ose--mainline--3.2#master#1d3f396485eb47b1ff6aa18ac4f1c4cd51c0ea4c</div><div>Compile-Date: Mar 7 2011 20:13:29</div><div>Enable-Threads: on</div>
<div>Enable-Debug: off</div><div>Enable-GProf: off</div><div>Enable-Memtrace: off</div><div>Enable-Sun-STREAMS: off</div><div>Enable-IPv6: on</div><div>Enable-Spoof-Source: on</div><div>Enable-TCP-Wrapper: on</div><div>Enable-SSL: on</div>
<div>Enable-SQL: on</div><div>Enable-Linux-Caps: off</div><div>Enable-Pcre: off</div><div>Enable-Pacct: off</div><div><br></div><div><br></div><div>I'm trying the binary of 3.3.0alpha1 from the website and will report back if it works :)<br>
<br></div></div><div>Cheers,</div><div>Eshan</div><br>
<br><br><div class="gmail_quote">On 8 March 2011 19:23, Fekete Robert <span dir="ltr"><<a href="mailto:frobert@balabit.hu">frobert@balabit.hu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hi, try running the 'syslog-ng --version' command and verify that your binary<br>
was compiled with SQL-support enabled.<br>
If not, you need to recompile syslog-ng, or use a binary from the balabit<br>
website:<br>
<a href="http://www.balabit.com/network-security/syslog-ng/opensource-logging-system/downloads/upgrade" target="_blank">http://www.balabit.com/network-security/syslog-ng/opensource-logging-system/downloads/upgrade</a><br>
<br>
Regards,<br>
<br>
Robert<br>
<div><div></div><div class="h5"><br>
On 03/08/2011 08:16 AM, Eshan Bhide wrote:<br>
<br>
> Hi guys,<br>
><br>
> I'm trying to setup a master syslog-ng server which listens on UDP syslog port<br>
> to incoming squid access log and Cisco syslog messages. It uses a db_parser to<br>
> parse and store these access logs in different variables. I now need to store<br>
> these values in a simple mysql database. I have created the database schema and<br>
> thought of using a pipe and a wrapper script to write the query. But read that<br>
> there are problems sometimes with this approach.<br>
> I then thought about doing it using libddb and downloaded the<br>
> package syslog-ng_3.2.2 from the website.<br>
><br>
> So far so good, but when I try to run syslog-ng it gives me an error:<br>
><br>
> syslog-ng<br>
> Error opening plugin module; module='afsql',<br>
> error='/usr/local/lib/syslog-ng/libafsql.so: undefined symbol: dbi_result_free'<br>
> Error opening plugin module; module='afsql',<br>
> error='/usr/local/lib/syslog-ng/libafsql.so: undefined symbol: dbi_result_free'<br>
> Error parsing destination, destination plugin sql not found in<br>
> /usr/local/etc/syslog-ng.conf at line 61, column 3:<br>
><br>
> sql(type(mysql)<br>
> ^^^<br>
><br>
> Any pointers on what I'm missing here ? I have commented out the '@module afsql'<br>
> line in modules.conf, have made sure I've got the latest libdb and libdb-devel<br>
> packages. I'm running CentOS 5.x and just don't know how to proceed :(<br>
> Appreciate all and any help guys thank you.<br>
><br>
><br>
><br>
> --<br>
> Eshan Bhide<br>
> Engineer, Core Infrastructure and Systems Development<br>
> Global Gossip<br>
><br>
> 14 Wentworth Ave<br>
> Surry Hills, NSW 2010 Australia<br>
><br>
</div></div>> -------------------------------------------------<br>
><br>
> IMPORTANT NOTICE : The information in this email is confidential and may also be privileged.<br>
> If you are not the intended recipient, any use or dissemination of the information and any<br>
> disclosure or copying of this email is unauthorised and strictly prohibited. If you have received<br>
> this email in error, please promptly inform us by reply email or telephone. You should also delete<br>
> this email and destroy any hard copies produced.<br>
><br>
><br>
><br>
><br>
> ______________________________________________________________________________<br>
> Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
> Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
> FAQ: <a href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br>
><br>
<br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br>
<br>
</blockquote></div><br>
<pre>-------------------------------------------------
IMPORTANT NOTICE : The information in this email is confidential and may also be privileged.
If you are not the intended recipient, any use or dissemination of the information and any
disclosure or copying of this email is unauthorised and strictly prohibited. If you have received
this email in error, please promptly inform us by reply email or telephone. You should also delete
this email and destroy any hard copies produced.