<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
It should be simple to figure out.<br>
<br>
I would try making sure the syslog-ng process is actually using the
correct config file.<br>
<br>
Find and kill all syslog-ng processes<br>
examine the startup script to make sure it specifies the right one<br>
restart<br>
<br>
If this does not immediately show the answer, try moving the "old"
one by either making it unreadable, putting it in a new directory,
giving it a new name, etc.<br>
<br>
Then the startup should fail and give some useful information.<br>
<br>
last resort try tracing the start e.g. "strace syslog-ng" to see
what files are opened during startup.<br>
<br>
This is basic troubleshooting. Eliminate things, verify what you
think you know and then make one change at a time until you affect
the situation, then at least you know what will change the state of
things and you can proceed in that direction.<br>
<br>
Jim<br>
<br>
<div class="moz-cite-prefix">On 07/22/2014 03:46 AM, Anwar El
fatayri wrote:<br>
</div>
<blockquote cite="mid:DUB110-W8027E42859DC376091839DA7F10@phx.gbl"
type="cite">
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr"><font color="#000000" face="Calibri"><b> Any ideas
? <br id="FontBreak">
</b></font><br>
<br>
<b><font color="#666666" face="Calibri" size="3">El Fatayri
Anwar<br>
</font></b>
<div><br>
<font face="Calibri" size="3"><span
style="font-family:'bookman old style', 'new york', times,
serif;font-size:10pt;font-weight:bold;font-style:italic;color:rgb(0,
0, 255);"><br>
</span></font></div>
<br>
<br>
<div>
<hr id="stopSpelling">From: <a class="moz-txt-link-abbreviated" href="mailto:anwar.fatayri@hotmail.co.uk">anwar.fatayri@hotmail.co.uk</a><br>
To: <a class="moz-txt-link-abbreviated" href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a><br>
Date: Mon, 21 Jul 2014 10:47:01 +0200<br>
Subject: [syslog-ng] Syslog-ng using an old Template<br>
<br>
<div dir="ltr">
<style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:Calibri;
}
--></style>
<div dir="ltr"><font color="#000000" face="Calibri"><b>Hey,</b></font>
<div><font color="#000000" face="Calibri"><b><br>
</b></font></div>
<div><font color="#000000" face="Calibri"><b>I was using
this template for my tests : </b></font></div>
<div><font color="#000000" face="Calibri"><b><br>
</b></font></div>
<div><font color="#000000" face="Calibri"><b>
<div>template t_lyraJBossFormat {</div>
<div><br>
</div>
<div> template("${DATE} ${FULLHOST}
jboss_vad - ------------ - SD : ${SDATA} - <b
style="font-size:12pt;">------------ - MSG :</b><b
style="font-size:12pt;">
<div style="display:inline !important;"> ${MSGONLY}\n");</div>
</b></div>
</b></font><font color="#000000" face="Calibri"><b>
<div> template_escape(no);</div>
<div>};</div>
<div><br>
</div>
<div>This template is a Format that I use for JBoss
Logs. The syslog packet (IETF) is created and then
sent to syslog-ng via a named pipe. </div>
<div><br>
</div>
<div>After Debugging all the problems, the following
template was created to be used for all Jboss Logs
:</div>
<div><br>
</div>
<div>
<div>template t_lyraJBossFormat {</div>
<div><br>
</div>
<div> template("${DATE} ${FULLHOST}
jboss_vad - ${SDATA} - ${MSGONLY}\n");</div>
<div> template_escape(no);</div>
<div>};</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>The problem is that syslog-ng is still using
the old template. (I restarted the syslog-ng
service of course) </div>
<div><br>
</div>
<div>Any ideas ?</div>
<div><br>
</div>
<div>Thanks in advance.</div>
</b></font></div>
<div><br>
<b><font color="#666666" face="Calibri" size="3">El
Fatayri Anwar<br>
</font></b>
<div><br>
<font face="Calibri" size="3"><span
style="font-family:'bookman old style', 'new
york', times,
serif;font-size:10pt;font-weight:bold;font-style:italic;color:rgb(0,
0, 255);"><br>
</span></font></div>
</div>
</div>
</div>
<br>
______________________________________________________________________________
Member
info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation:
<a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a></div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
</pre>
</blockquote>
<br>
</body>
</html>