<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="generator" content="Osso Notes">
<title></title></head>
<body>
<p>----- Original message -----
<br>> James McDonald <<a href="mailto:jmcdonald@LCE.com">jmcdonald@LCE.com</a>> writes:
<br>>
<br>> > We are using version 4.0.1a.  I am using 'service syslog-ng restart.'
<br>> > Below is the output I get from running that command:
<br>>
<br>> Ah, if it is PE, then I'd suggest you contact us via BOSS. This list is
<br>> for the OpenSource Edition of syslog-ng.
<br>>
<br>> Nevertheless:
<br>>
<br>> > [<a href="mailto:root@server-name">root@server-name</a> ~]# service syslog-ng restart
<br>> > WARNING: Configuration file format is too old, please update it to use
<br>> > the 4.1 format as some constructs might operate inefficiently;
<br>> > WARNING: global: the default value of log_fifo_size() has changed to
<br>> > 10000 in syslog-ng 4.1 to reflect log_iw_size() changes for
<br>> > tcp()/udp() window size changes;
<br>> > Error resolving user; user='root'
<br>> > Error resolving group; group='root'
<br>>
<br>> This suggests that syslog-ng can't figure out what uid the root user
<br>> has. This usually means that /etc/passwd is borked, or Name Server
<br>> Switch functionality (see /etc/nsswitch.conf) is somehow not working.
<br>
<br>also, the logs indicate that it is v4.1 and not v4.0
<br>
<br>and v4.1 should be upgraded as that is a feature release with short term support periods, v4.2 superseeded it (after 3 months past the release date)
<br>
<br>but anyway the support guys should be helpful to resolve this issue.</p>
</body>
</html>