<p dir="ltr"><br>
On Feb 21, 2016 10:35 PM, "Árpád Magosányi" <<a href="mailto:mag@magwas.rulez.org">mag@magwas.rulez.org</a>> wrote:<br>
><br>
> On 02/20/2016 02:24 PM, Scheidler, Balázs wrote:<br>
> > Hi,<br>
> ><br>
> > can you run syslog-ng with --preprocess-into=/dev/stdout so that we<br>
> > can see what system() is being expanded to?<br>
><br>
> Output is attached</p>
<p dir="ltr">Seems that system() generates /dev/log but probably the systemd workaround in the unix-dgram driver kicks in and that makes syslog-ng to open the systemd forwarder socket in /run/...</p>
<p dir="ltr">That means that for some reason journald doesn't open /dev/log and that's why logger doesn't work. Can you check if systemd-journal operates?</p>
<p dir="ltr">><br>
> ><br>
> > 1) maybe syslog-ng thinks you are running systemd and opens a<br>
> > different socket for this reason<br>
> > 2) a bug in the system() source<br>
> > 3) something completely different.<br>
> ><br>
> > You might want to lsof the syslog-ng process only and see which socket<br>
> > it does open.<br>
> ><br>
><br>
> Are we talking about /run/systemd/journal/syslog ?<br>
> The system init is actually systemd. It is a debian 8 system, upgraded<br>
> from debian 6.<br>
><br>
> 'logger -u /run/systemd/journal/syslog' does work.<br>
><br>
> As a workaround I did 'ln -s /run/systemd/journal/syslog /dev/log' .<br>
><br>
> I feel like it is just a temporary solution. Would it be better to<br>
> change syslog-ng.conf to read from /dev/log as well, or do the<br>
> symlinking in boot time?<br>
><br>
> Anyway, here is the lsof output:<br>
><br>
><br>
> COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME<br>
> syslog-ng 17901 root cwd DIR 254,17 4096 2 /<br>
> syslog-ng 17901 root rtd DIR 254,17 4096 2 /<br>
> syslog-ng 17901 root txt REG 254,17 15016 149028<br>
> /usr/sbin/syslog-ng<br>
> syslog-ng 17901 root mem REG 254,17 22952 2100025<br>
> /lib/x86_64-linux-gnu/<a href="http://libnss_dns-2.19.so">libnss_dns-2.19.so</a><br>
> syslog-ng 17901 root mem REG 254,17 10480 2102165<br>
> /usr/lib/syslog-ng/3.5.6/liblinux-kmsg-format.so<br>
> syslog-ng 17901 root mem REG 254,17 51952 2102166<br>
> /usr/lib/syslog-ng/3.5.6/libsyslogformat.so<br>
> syslog-ng 17901 root mem REG 254,17 77904 2102155<br>
> /usr/lib/syslog-ng/3.5.6/libaffile.so<br>
> syslog-ng 17901 root mem REG 254,17 40624 2097689<br>
> /lib/x86_64-linux-gnu/libwrap.so.0.7.6<br>
> syslog-ng 17901 root mem REG 254,17 96920 2101490<br>
> /usr/lib/x86_64-linux-gnu/libnet.so.1.7.0<br>
> syslog-ng 17901 root mem REG 254,17 2062720 2098102<br>
> /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0<br>
> syslog-ng 17901 root mem REG 254,17 392312 2100757<br>
> /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0<br>
> syslog-ng 17901 root mem REG 254,17 27440 2102154<br>
> /usr/lib/syslog-ng/3.5.6/libsyslog-ng-crypto.so<br>
> syslog-ng 17901 root mem REG 254,17 112432 2102157<br>
> /usr/lib/syslog-ng/3.5.6/libafsocket-tls.so<br>
> syslog-ng 17901 root mem REG 254,17 47712 2100026<br>
> /lib/x86_64-linux-gnu/<a href="http://libnss_files-2.19.so">libnss_files-2.19.so</a><br>
> syslog-ng 17901 root mem REG 254,17 43592 2100028<br>
> /lib/x86_64-linux-gnu/<a href="http://libnss_nis-2.19.so">libnss_nis-2.19.so</a><br>
> syslog-ng 17901 root mem REG 254,17 31632 2100024<br>
> /lib/x86_64-linux-gnu/<a href="http://libnss_compat-2.19.so">libnss_compat-2.19.so</a><br>
> syslog-ng 17901 root mem REG 254,17 10440 2102161<br>
> /usr/lib/syslog-ng/3.5.6/libconfgen.so<br>
> syslog-ng 17901 root mem REG 254,17 14568 2102167<br>
> /usr/lib/syslog-ng/3.5.6/libsystem-source.so<br>
> syslog-ng 17901 root mem REG 254,17 72136 2097738<br>
> /lib/x86_64-linux-gnu/libgpg-error.so.0.13.0<br>
> syslog-ng 17901 root mem REG 254,17 84856 2100031<br>
> /lib/x86_64-linux-gnu/<a href="http://libresolv-2.19.so">libresolv-2.19.so</a><br>
> syslog-ng 17901 root mem REG 254,17 924096 2097740<br>
> /lib/x86_64-linux-gnu/libgcrypt.so.20.0.3<br>
> syslog-ng 17901 root mem REG 254,17 141752 2097693<br>
> /lib/x86_64-linux-gnu/liblzma.so.5.0.0<br>
> syslog-ng 17901 root mem REG 254,17 18640 2097405<br>
> /lib/x86_64-linux-gnu/libattr.so.1.1.0<br>
> syslog-ng 17901 root mem REG 254,17 145688 2097769<br>
> /lib/x86_64-linux-gnu/libsystemd.so.0.3.1<br>
> syslog-ng 17901 root mem REG 254,17 1738176 2100017<br>
> /lib/x86_64-linux-gnu/<a href="http://libc-2.19.so">libc-2.19.so</a><br>
> syslog-ng 17901 root mem REG 254,17 137440 2100013<br>
> /lib/x86_64-linux-gnu/<a href="http://libpthread-2.19.so">libpthread-2.19.so</a><br>
> syslog-ng 17901 root mem REG 254,17 48592 2101704<br>
> /usr/lib/x86_64-linux-gnu/libivykis.so.0.3.5<br>
> syslog-ng 17901 root mem REG 254,17 14664 2100020<br>
> /lib/x86_64-linux-gnu/<a href="http://libdl-2.19.so">libdl-2.19.so</a><br>
> syslog-ng 17901 root mem REG 254,17 448440 2097688<br>
> /lib/x86_64-linux-gnu/libpcre.so.3.13.1<br>
> syslog-ng 17901 root mem REG 254,17 19016 2097370<br>
> /lib/x86_64-linux-gnu/libcap.so.2.24<br>
> syslog-ng 17901 root mem REG 254,17 18840 2102113<br>
> /usr/lib/x86_64-linux-gnu/libevtlog.so.0.0.0<br>
> syslog-ng 17901 root mem REG 254,17 1107040 2100763<br>
> /lib/x86_64-linux-gnu/libglib-2.0.so.0.4200.1<br>
> syslog-ng 17901 root mem REG 254,17 6112 2097853<br>
> /usr/lib/x86_64-linux-gnu/libgthread-2.0.so.0.4200.1<br>
> syslog-ng 17901 root mem REG 254,17 14624 2097851<br>
> /usr/lib/x86_64-linux-gnu/libgmodule-2.0.so.0.4200.1<br>
> syslog-ng 17901 root mem REG 254,17 89104 2100023<br>
> /lib/x86_64-linux-gnu/<a href="http://libnsl-2.19.so">libnsl-2.19.so</a><br>
> syslog-ng 17901 root mem REG 254,17 31784 2100032<br>
> /lib/x86_64-linux-gnu/<a href="http://librt-2.19.so">librt-2.19.so</a><br>
> syslog-ng 17901 root mem REG 254,17 582064 2102153<br>
> /usr/lib/syslog-ng/<a href="http://libsyslog-ng-3.5.6.so">libsyslog-ng-3.5.6.so</a><br>
> syslog-ng 17901 root mem REG 254,17 140928 2100014<br>
> /lib/x86_64-linux-gnu/<a href="http://ld-2.19.so">ld-2.19.so</a><br>
> syslog-ng 17901 root mem REG 254,17 16384 2097337<br>
> /var/lib/syslog-ng/syslog-ng.persist<br>
> syslog-ng 17901 root 0r CHR 1,3 0t0 1028<br>
> /dev/null<br>
> syslog-ng 17901 root 1w CHR 1,3 0t0 1028<br>
> /dev/null<br>
> syslog-ng 17901 root 2w CHR 1,3 0t0 1028<br>
> /dev/null<br>
> syslog-ng 17901 root 3u unix 0xffff8800d8b04000 0t0 1761378<br>
> /run/systemd/journal/syslog<br>
> syslog-ng 17901 root 4u 0000 0,9 0 6651<br>
> anon_inode<br>
> syslog-ng 17901 root 5u 0000 0,9 0 6651<br>
> anon_inode<br>
> syslog-ng 17901 root 6u REG 254,17 16384 2097337<br>
> /var/lib/syslog-ng/syslog-ng.persist<br>
> syslog-ng 17901 root 7r CHR 1,11 0t0 1034<br>
> /dev/kmsg<br>
> syslog-ng 17901 root 9u unix 0xffff880054b01000 0t0 1760410<br>
> /var/lib/syslog-ng/syslog-ng.ctl<br>
> syslog-ng 17901 root 10u 0000 0,9 0 6651<br>
> anon_inode<br>
> syslog-ng 17901 root 11u 0000 0,9 0 6651<br>
> anon_inode<br>
> syslog-ng 17901 root 12u 0000 0,9 0 6651<br>
> anon_inode<br>
> syslog-ng 17901 root 13u 0000 0,9 0 6651<br>
> anon_inode<br>
> syslog-ng 17901 root 14w REG 254,17 60531 1048741<br>
> /var/log/messages<br>
> syslog-ng 17901 root 15u FIFO 0,5 0t0 19564<br>
> /dev/xconsole<br>
><br>
><br>
> ______________________________________________________________________________<br>
> Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
> Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
> FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
><br>
><br>
</p>