<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>RE: Error in running syslogng client - source plugin sun-streams not found </TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="en-us"><FONT COLOR="#1F497D" FACE="Calibri">Hi all,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT COLOR="#1F497D" FACE="Calibri">In the below conf file,</FONT></SPAN><SPAN LANG="en-us"> <FONT COLOR="#1F497D" FACE="Calibri">I</FONT></SPAN><SPAN LANG="en-us"><FONT COLOR="#1F497D" FACE="Calibri"></FONT> <FONT COLOR="#1F497D" FACE="Calibri">can see</FONT></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">@include "scl.conf"</FONT></SPAN><SPAN LANG="en-us">.</SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">If</FONT></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">I</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"></FONT> <FONT FACE="Calibri">remove that line or if</FONT></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">I</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"></FONT> <FONT FACE="Calibri">change it to</FONT></SPAN><SPAN LANG="en-us"> <FONT FACE="Wingdings" SIZE=3>à</FONT></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"> include</FONT></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">“</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">s</FONT><FONT FACE="Calibri">cl.conf</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">”</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">; [i.e remove @ and add ; at the end], it</FONT></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">did not complain any error</FONT></SPAN><SPAN LANG="en-us">.</SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Is that expected</FONT></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">behavior</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">?</FONT><FONT FACE="Calibri"> </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">T</FONT><FONT FACE="Calibri">hanks</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Hithendra</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma">_____________________________________________<BR>
</FONT></SPAN><SPAN LANG="en-us"><B></B></SPAN><SPAN LANG="en-us"><B><FONT SIZE=2 FACE="Tahoma">From:</FONT></B></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma"> Balla, Hithendra (EXT-Other - IN/Bangalore)<BR>
</FONT></SPAN><SPAN LANG="en-us"><B></B></SPAN><SPAN LANG="en-us"><B><FONT SIZE=2 FACE="Tahoma">Sent:</FONT></B></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma"> Monday, June 04, 2012 4:01 PM<BR>
</FONT></SPAN><SPAN LANG="en-us"><B></B></SPAN><SPAN LANG="en-us"><B><FONT SIZE=2 FACE="Tahoma">To:</FONT></B></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma"> 'Syslog-ng users' and developers' mailing list'<BR>
</FONT></SPAN><SPAN LANG="en-us"><B></B></SPAN><SPAN LANG="en-us"><B><FONT SIZE=2 FACE="Tahoma">Subject:</FONT></B></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma"> Error in running syslogng client - source plugin sun-streams not found </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Hi all,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Can somebody help here in identifying the issue here. It says source plug-in sun-streams not sound. I have configured syslog-ng with</FONT></SPAN><SPAN LANG="en-us"><B> <FONT FACE="Calibri">--enable-ssl --enable-sun-streams</FONT></B></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">A02-LEM-CSLPN01A# /usr/local/sbin/syslog-ng -V</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">syslog-ng 3.4.0alpha2</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Installer-Version: 3.4.0alpha2</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Revision: ssh+git://bazsi@git.balabit//var/scm/git/syslog-ng/syslog-ng-ose--mainline--3.4--master#ab25c4c2a32988d86a5e024d784db7ad48f17cd2</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Compile-Date: Jun</FONT><FONT FACE="Calibri"> 4 2012 18:38:40</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Available-Modules:</FONT></SPAN><SPAN LANG="en-us"><B> <FONT FACE="Calibri">afsocket</FONT></B></SPAN><SPAN LANG="en-us">,<B><FONT FACE="Calibri">afsocket-notls</FONT></B></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">,afstreams,affile,afprog,afuser,afmongodb,csvparser,confgen,syslogformat,basicfuncs,dbparser,tfuuid,</FONT></SPAN><SPAN LANG="en-us"><B><FONT FACE="Calibri">afsocket-tls</FONT></B></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Enable-Debug: off</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Enable-GProf: off</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Enable-Memtrace: off</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Enable-IPv6: on</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Enable-Spo</FONT><FONT FACE="Calibri">of-Source: off</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Enable-TCP-Wrapper: off</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Enable-Linux-Caps: off</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Enable-Pcre: on</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">A02-LEM-CSLPN01A#</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">This is the client config file</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="fr"><FONT FACE="Calibri">#############################################################################</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="fr"><FONT FACE="Calibri">#Syslog-ng Client configuration File.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">#</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">@version</FONT><FONT FACE="Calibri">: 3.3</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">@include "scl.conf"</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">options {</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri"> keep_hostname (yes);</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri"> log_fifo_size (1000);</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri"> };</FONT></SPAN></P>
<BR>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">source s_local { </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri"> sun-streams("/dev/log"); </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri"> udp(ip(0.0.0.0) port(514));</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri"> };</FONT></SPAN></P>
<BR>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">A02-LEM-CSLPN01A# /usr/local/sbin/syslog-ng -fFvde ~/syslog_conf/mod/syslog-ng_client.conf </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">nanosleep() is not accurate enough to introduce minor stalls on the reader side, multi-threaded performance may be affected;</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">WARNING: Configuration file format is t</FONT><FONT FACE="Calibri">oo old, please update it to use the 3.4 format as some constructs might operate inefficiently;</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Starting to read include file; filename='/usr/local/etc/scl.conf', depth='1'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Global value changed; define='scl-root', value='/usr/local/share/include/scl'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Global</FONT><FONT FACE="Calibri"> value changed; define='include-path', value='/usr/local/etc:/usr/local/share/include'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Starting to read include file; filename='/usr/local/etc/modules.conf', depth='2'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Global value changed; define='autoload-compiled-modules', value='0'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Module loaded and in</FONT><FONT FACE="Calibri">itialized successfully; module='syslogformat'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Module loaded and initialized successfully; module='basicfuncs'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Module loaded and initialized successfully; module='afsocket'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Module loaded and initialized successfully; module='affile'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Module loaded and initia</FONT><FONT FACE="Calibri">lized successfully; module='afprog'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Module loaded and initialized successfully; module='afuser'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Module loaded and initialized successfully; module='dbparser'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Module loaded and initialized successfully; module='csvparser'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Finishing include; filename='/usr/l</FONT><FONT FACE="Calibri">ocal/etc/modules.conf', depth='2'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Starting to read include file; filename='/usr/local/share/include/scl/system/plugin.conf', depth='2'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Module loaded and initialized successfully; module='confgen'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Finishing include; filename='/usr/lo</FONT><FONT FACE="Calibri">cal/share/include/scl/system/plugin.conf', depth='2'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Starting to read include file; filename='/usr/local/share/include/scl/pacct/plugin.conf', depth='2'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Finishing include; filename='/usr/local/share/include/scl/pacct/plugin.conf', depth='2'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Starting to rea</FONT><FONT FACE="Calibri">d include file; filename='/usr/local/share/include/scl/syslogconf/plugin.conf', depth='2'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Module loaded and initialized successfully; module='confgen'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Finishing include; filename='/usr/local/share/include/scl/syslogconf/plugin.conf', depth='2'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Finishing in</FONT><FONT FACE="Calibri">clude; filename='/usr/local/etc/scl.conf', depth='1'</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><B><FONT COLOR="#FF0000" FACE="Calibri">Error parsing source, source plugin sun-streams not found in /export/home/root/syslog_conf/mod/syslog-ng_client.conf at line 14, column 18:</FONT></B></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><B><FONT COLOR="#FF0000" FACE="Calibri">source s_local { sun-streams("/dev/log"); udp(ip(0.0.0.0) port</FONT><FONT COLOR="#FF0000" FACE="Calibri">(514)) ;};</FONT></B></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><B><FONT COLOR="#FF0000" FACE="Calibri"> ^^^^^^^^^^^</FONT></B></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">syslog-ng documentation:</FONT></SPAN><SPAN LANG="en-us"> </SPAN><A HREF="http://www.balabit.com/support/documentation/?product=syslog-ng"><SPAN LANG="en-us"><U><FONT COLOR="#0000FF" FACE="Calibri">http://www.balabit.com/support/documentation/?product=syslog-ng</FONT></U></SPAN><SPAN LANG="en-us"></SPAN></A><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">mailing list:</FONT></SPAN><SPAN LANG="en-us"> </SPAN><A HREF="https://lists.balabit.hu/mailman/listinfo/syslog-ng"><SPAN LANG="en-us"><U><FONT COLOR="#0000FF" FACE="Calibri">https://lists.balabit.hu/mailman/listinfo/syslog-ng</FONT></U></SPAN><SPAN LANG="en-us"></SPAN></A><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">A02-LEM-CSLPN01A</FONT></SPAN></P>
</BODY>
</HTML>