<p dir="ltr">Hmm. I dont see what dbparser is trying to persist there. Now as I think of it, its probably the correlation state table.</p>
<p dir="ltr">This seems to be a genuine bug.</p>
<div class="gmail_quote">On Apr 8, 2015 1:31 PM, "Mikkel Leth Carlsen" <<a href="mailto:mlca@tdc.dk">mlca@tdc.dk</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi<br>
<br>
Are db-parsers defined in syslog-ng configurations not reusable for multiple logs? A simplified example (syslog 3.6.2):<br>
<br>
parser myparser {<br>
db_parser(<br>
file("/usr/local/etc/patterndb.d/myparser.xml")<br>
);<br>
};<br>
<br>
template mytemplate {<br>
template("${A};${B};${C}\n");<br>
}<br>
<br>
filter filter_host1 {<br>
netmask(<a href="http://10.0.0.1/255.255.255.255" target="_blank">10.0.0.1/255.255.255.255</a>);<br>
};<br>
<br>
filter filter_host2 {<br>
netmask(<a href="http://10.0.0.2/255.255.255.255" target="_blank">10.0.0.2/255.255.255.255</a>);<br>
};<br>
<br>
destination dst_host1 {<br>
file("host1.log" perm(0644) template(mytemplate));<br>
};<br>
<br>
<br>
destination dst_host2 {<br>
file("host2.log" perm(0644) template(mytemplate));<br>
};<br>
<br>
log {<br>
source(src_udp);<br>
filter(filter_host1);<br>
parser(myparser);<br>
destination(dst_host1);<br>
flags(final);<br>
};<br>
<br>
log {<br>
source(src_udp);<br>
filter(filter_host2);<br>
parser(myparser);<br>
destination(dst_host2);<br>
flags(final);<br>
};<br>
<br>
This seems to work as expected and 'syslog-ng -s' does not report any problems, but I see the following in the syslog-ng internal log:<br>
<br>
Internal error, duplicate configuration elements refer to the same persistent config; name='db-parser(/usr/local/etc/patterndb.d/myparser.xml)'<br>
Internal error, duplicate configuration elements refer to the same persistent config; name='db-parser(/usr/local/etc/patterndb.d/myparser.xml)'<br>
<br>
/Mikkel<br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>