<p dir="ltr">You can see the latest syslog-ng releases on syslog-ng github pages at:</p>
<p dir="ltr"><a href="http://github.com/balabit/syslog-ng">github.com/balabit/syslog-ng</a></p>
<p dir="ltr">The latest is 3.7.1</p>
<div class="gmail_quote">On Sep 24, 2015 4:28 AM, &quot;Justin Kala&quot; &lt;<a href="mailto:justinkala@gmail.com">justinkala@gmail.com</a>&gt; wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Is 3.5.6 OSE still  the latest stable version or anything higher ??</div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Nov 2, 2014 at 2:26 AM, Balazs Scheidler <span dir="ltr">&lt;<a href="mailto:bazsi77@gmail.com" target="_blank">bazsi77@gmail.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">You can always use pdbtool match to debug and match messages against a patterndb database.</p>
<p dir="ltr">It even colorizes output how far a message matched.</p><div><div>
<div class="gmail_quote">On Oct 3, 2014 10:35 AM, &quot;Fabien Wernli&quot; &lt;<a href="mailto:wernli@in2p3.fr" target="_blank">wernli@in2p3.fr</a>&gt; wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Justin,<br>
<br>
First things first, your patterndb file doesn&#39;t validate.<br>
You should always test and validate the files using<br>
`pdbtool test --validate &lt;file.pdb&gt;`. You have to put the text of your<br>
example in a `&lt;test_message&gt;` element, without forgetting the `program`:<br>
<br>
    &lt;examples&gt;<br>
      &lt;example&gt;<br>
        &lt;test_message program=&quot;sshd&quot;&gt;Failed password for kaladhar from 127.0.1.1 port 44637 ssh2&lt;/test_message&gt;<br>
      &lt;/example&gt;<br>
    &lt;/examples&gt;<br>
<br>
Now this probably doesn&#39;t explain why the parser doesn&#39;t match your messages.<br>
<br>
On Thu, Oct 02, 2014 at 04:31:38PM -0400, Justin Kala wrote:<br>
&gt; * cat messagesAuth.2014.10.02.16unknown|unknown|*<br>
<br>
this means your message correctly made it to the pattern parser, but didn&#39;t<br>
match any rule.<br>
What I can suggest, is to run syslog-ng in the foreground, using `syslog-ng<br>
-Fvd` so you&#39;ll also get debugging information. Please post the relevant<br>
info from the output, if you don&#39;t figure it out by yourself.<br>
<br>
Cheers<br>
<br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>
</div></div><br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div>Kaladhar</div>
</div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div>