<p dir="ltr">Hi,</p>
<p dir="ltr">The warning about match means that match() without an explicit value() option tries to match against the value of the format $PROGRAM[$PID]: $MSGHDR$MSG which happens to be the same as $MSG in syslog-ng before 3.0.</p>
<p dir="ltr">Post 3.0 these values were split, and to mimic the old behavior syslog-ng needs to create this artificial value which is a lot slower than matching against specific name value pairs.</p>
<p dir="ltr">So either use match() with value('MSG') or use the more specific filters (message(), program() or whatever). This will improve performance.</p>
<p dir="ltr">@version at the top of the file indicates which syslog-ng version the config was written for. It is only known by syslog-ng past 3.0. You may have started the old version in that case.</p>
<p dir="ltr">You can BTW find support from BalaBit that can make your life much easier.<br>
Bazsi</p>
<div class="gmail_quote">On Jun 19, 2015 7:39 PM, "Mason, Tron" <<a href="mailto:Tron.Mason@mail.house.gov">Tron.Mason@mail.house.gov</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Hello…</span></b></p>
<p class="MsoNormal">I’m getting the following errors. Please help. Thanks.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">bash-3.2# /usr/local/sbin/syslog-ng -v -s -f /usr/local/etc/syslog-ng/syslog-ng.conf<u></u><u></u></p>
<p class="MsoNormal">WARNING: the match() filter without the use of the value() option is deprecated and hinders performance, please update your configuration;<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">bash-3.2# /usr/local/etc/syslog-ng/syslog-ng.conf -a -f /usr/local/sbin/syslog-ng
<u></u><u></u></p>
<p class="MsoNormal">/usr/local/etc/syslog-ng/syslog-ng.conf: line 10: @version:: command not found<u></u><u></u></p>
<p class="MsoNormal">/usr/local/etc/syslog-ng/syslog-ng.conf: line 12: syntax error near unexpected token `('<u></u><u></u></p>
<p class="MsoNormal">/usr/local/etc/syslog-ng/syslog-ng.conf: line 12: `options { use_dns(yes); '<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Garamond","serif";color:#244061;text-transform:uppercase;letter-spacing:1.5pt">Tron G Mason<u></u><u></u></span></b></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div>