<div dir="ltr">Hi, <div><br></div><div>I'd believe you ran into this issue: <a href="https://github.com/balabit/syslog-ng/issues/1188">https://github.com/balabit/syslog-ng/issues/1188</a></div><div>Probably the client-lib-dir() path is incorrect for some reason.</div><div><br></div><div>HTH, </div><div><br></div><div>Robert</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Sep 6, 2016 at 6:28 PM, Scot Needy <span dir="ltr"><<a href="mailto:scotrn@gmail.com" target="_blank">scotrn@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><div>Fighting with this all weekend and I need some fresh eyes. Source git snapshot 9/5 with --enable-spoof-source --enable-goip --enable-json=yes --enable-java --enable-systemd --enable-java-modules</div><div><br></div><div>I get no missing libraries or modules on startup and have used every variation I could find on the conf file. </div><div><br></div><div>My goal is to get a syslog-ng relay to also log to es2 but I’m beginning to think this error is more related to syslog-ng not being able to log to the CentOS 7 Journal ?</div><div><br></div><div><div><b>/opt/syslog-ng/sbin/syslog-ng -V</b></div><div>syslog-ng 3.8.1</div><div>Installer-Version: 3.8.1</div><div>Revision:</div><div>Module-Directory: /opt/syslog-ng/lib/syslog-ng</div><div>Module-Path: /opt/syslog-ng/lib/syslog-ng</div><div>Available-Modules: dbparser,cryptofuncs,afsocket,<wbr>date,afstomp,afmongodb,linux-<wbr>kmsg-format,afsmtp,graphite,<wbr>geoip-plugin,csvparser,<wbr>kvformat,disk-buffer,cef,<wbr>sdjournal,basicfuncs,<wbr>pseudofile,afuser,afamqp,<wbr>afprog,confgen,mod-java,curl,<wbr>system-source,syslogformat,<wbr>add-contextual-data,affile,<wbr>json-plugin</div><div>Enable-Debug: off</div><div>Enable-GProf: off</div><div>Enable-Memtrace: off</div><div>Enable-IPv6: on</div><div>Enable-Spoof-Source: on</div><div>Enable-TCP-Wrapper: off</div><div>Enable-Linux-Caps: off</div></div><span></span><div><br></div><div><br></div><div><br></div><div>##################### syslog-ng.conf simple ###############</div><div><div>@version: 3.8</div><div>@module mod-java</div><div>@include "scl.conf"</div><div><br></div><div>source s_netsyslog {</div><div> udp(ip(0.0.0.0) port(514) flags(no-hostname));</div><div> tcp(ip(0.0.0.0) port(514) flags(no-hostname));</div><div>};</div><div><br></div><div>######</div><div># Elasticsearch destination</div><div>destination d_es {</div><div> elasticsearch2(</div><div> index("syslog-ng_${YEAR}.${<wbr>MONTH}.${DAY}")</div><div> type("test")</div><div> );</div><div>};</div><div><br></div><div>log {</div><div> source(s_netsyslog);</div><div> destination(d_es);</div><div> flags(flow-control);</div><div>};</div></div><div><br></div><div><br></div><div><div>[root@syslog-ng]# /opt/syslog-ng/sbin/syslog-ng -Fevd -f /opt/syslog-ng/etc/syslog-ng.<wbr>conf</div><div>[2016-09-06T11:59:52.402514] Systemd is detected as the running init system;</div><div>[2016-09-06T11:59:52.406577] Module loaded and initialized successfully; module='mod-java'</div><div>[2016-09-06T11:59:52.406634] Starting to read include file; filename='/opt/syslog-ng/etc/<wbr>scl.conf', depth='1'</div><div>[2016-09-06T11:59:52.406954] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>apache/apache.conf', depth='2'</div><div>[2016-09-06T11:59:52.406964] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>cim/template.conf', depth='2'</div><div>[2016-09-06T11:59:52.406970] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>elasticsearch/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.406975] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>graphite/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.406980] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>hdfs/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.406985] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>kafka/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.406990] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>loggly/loggly.conf', depth='2'</div><div>[2016-09-06T11:59:52.406995] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>logmatic/logmatic.conf', depth='2'</div><div>[2016-09-06T11:59:52.407000] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>mbox/mbox.conf', depth='2'</div><div>[2016-09-06T11:59:52.407004] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>nodejs/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.407009] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>pacct/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.407014] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>rewrite/cc-mask.conf', depth='2'</div><div>[2016-09-06T11:59:52.407019] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>solaris/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.407024] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>syslogconf/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.407029] Adding include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>system/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.407041] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>apache/apache.conf', depth='2'</div><div>[2016-09-06T11:59:52.407108] Reading path for candidate modules; path='/opt/syslog-ng/lib/<wbr>syslog-ng'</div><div>[2016-09-06T11:59:52.407160] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='dbparser.so', module='dbparser'</div><div>[2016-09-06T11:59:52.407443] Registering candidate plugin; module='dbparser', context='parser', name='db-parser', preference='0'</div><div>[2016-09-06T11:59:52.407458] Registering candidate plugin; module='dbparser', context='parser', name='grouping-by', preference='0'</div><div>[2016-09-06T11:59:52.407493] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='cryptofuncs.so', module='cryptofuncs'</div><div>[2016-09-06T11:59:52.407662] Registering candidate plugin; module='cryptofuncs', context='template-func', name='uuid', preference='0'</div><div>[2016-09-06T11:59:52.407672] Registering candidate plugin; module='cryptofuncs', context='template-func', name='hash', preference='0'</div><div>[2016-09-06T11:59:52.407678] Registering candidate plugin; module='cryptofuncs', context='template-func', name='sha1', preference='0'</div><div>[2016-09-06T11:59:52.407684] Registering candidate plugin; module='cryptofuncs', context='template-func', name='sha256', preference='0'</div><div>[2016-09-06T11:59:52.407690] Registering candidate plugin; module='cryptofuncs', context='template-func', name='sha512', preference='0'</div><div>[2016-09-06T11:59:52.407696] Registering candidate plugin; module='cryptofuncs', context='template-func', name='md4', preference='0'</div><div>[2016-09-06T11:59:52.407701] Registering candidate plugin; module='cryptofuncs', context='template-func', name='md5', preference='0'</div><div>[2016-09-06T11:59:52.407725] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='afsocket.so', module='afsocket'</div><div>[2016-09-06T11:59:52.408068] Registering candidate plugin; module='afsocket', context='source', name='unix-stream', preference='100'</div><div>[2016-09-06T11:59:52.408080] Registering candidate plugin; module='afsocket', context='destination', name='unix-stream', preference='100'</div><div>[2016-09-06T11:59:52.408112] Registering candidate plugin; module='afsocket', context='source', name='unix-dgram', preference='100'</div><div>[2016-09-06T11:59:52.408119] Registering candidate plugin; module='afsocket', context='destination', name='unix-dgram', preference='100'</div><div>[2016-09-06T11:59:52.408130] Registering candidate plugin; module='afsocket', context='source', name='tcp', preference='100'</div><div>[2016-09-06T11:59:52.408136] Registering candidate plugin; module='afsocket', context='destination', name='tcp', preference='100'</div><div>[2016-09-06T11:59:52.408149] Registering candidate plugin; module='afsocket', context='source', name='tcp6', preference='100'</div><div>[2016-09-06T11:59:52.408155] Registering candidate plugin; module='afsocket', context='destination', name='tcp6', preference='100'</div><div>[2016-09-06T11:59:52.408161] Registering candidate plugin; module='afsocket', context='source', name='udp', preference='100'</div><div>[2016-09-06T11:59:52.408166] Registering candidate plugin; module='afsocket', context='destination', name='udp', preference='100'</div><div>[2016-09-06T11:59:52.408171] Registering candidate plugin; module='afsocket', context='source', name='udp6', preference='100'</div><div>[2016-09-06T11:59:52.408193] Registering candidate plugin; module='afsocket', context='destination', name='udp6', preference='100'</div><div>[2016-09-06T11:59:52.408200] Registering candidate plugin; module='afsocket', context='source', name='syslog', preference='100'</div><div>[2016-09-06T11:59:52.408206] Registering candidate plugin; module='afsocket', context='destination', name='syslog', preference='100'</div><div>[2016-09-06T11:59:52.408216] Registering candidate plugin; module='afsocket', context='source', name='network', preference='100'</div><div>[2016-09-06T11:59:52.408222] Registering candidate plugin; module='afsocket', context='destination', name='network', preference='100'</div><div>[2016-09-06T11:59:52.408228] Registering candidate plugin; module='afsocket', context='source', name='systemd-syslog', preference='100'</div><div>[2016-09-06T11:59:52.408268] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='date.so', module='date'</div><div>[2016-09-06T11:59:52.408436] Registering candidate plugin; module='date', context='parser', name='date-parser', preference='0'</div><div>[2016-09-06T11:59:52.408467] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='afstomp.so', module='afstomp'</div><div>[2016-09-06T11:59:52.408650] Registering candidate plugin; module='afstomp', context='destination', name='stomp', preference='0'</div><div>[2016-09-06T11:59:52.408681] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='afmongodb.so', module='afmongodb'</div><div>[2016-09-06T11:59:52.409439] Registering candidate plugin; module='afmongodb', context='destination', name='mongodb', preference='0'</div><div>[2016-09-06T11:59:52.409526] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='linux-kmsg-format.so', module='linux-kmsg-format'</div><div>[2016-09-06T11:59:52.409706] Registering candidate plugin; module='linux-kmsg-format', context='format', name='linux-kmsg', preference='0'</div><div>[2016-09-06T11:59:52.409736] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='afsmtp.so', module='afsmtp'</div><div>[2016-09-06T11:59:52.410048] Registering candidate plugin; module='afsmtp', context='destination', name='smtp', preference='0'</div><div>[2016-09-06T11:59:52.410099] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='graphite.so', module='graphite'</div><div>[2016-09-06T11:59:52.410320] Registering candidate plugin; module='graphite', context='template-func', name='graphite_output', preference='0'</div><div>[2016-09-06T11:59:52.410385] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='geoip-plugin.so', module='geoip-plugin'</div><div>[2016-09-06T11:59:52.410718] Registering candidate plugin; module='geoip-plugin', context='parser', name='geoip', preference='0'</div><div>[2016-09-06T11:59:52.410730] Registering candidate plugin; module='geoip-plugin', context='template-func', name='geoip', preference='0'</div><div>[2016-09-06T11:59:52.410801] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='csvparser.so', module='csvparser'</div><div>[2016-09-06T11:59:52.411002] Registering candidate plugin; module='csvparser', context='parser', name='csv-parser', preference='0'</div><div>[2016-09-06T11:59:52.411037] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='kvformat.so', module='kvformat'</div><div>[2016-09-06T11:59:52.411229] Registering candidate plugin; module='kvformat', context='parser', name='kv-parser', preference='0'</div><div>[2016-09-06T11:59:52.411239] Registering candidate plugin; module='kvformat', context='parser', name='linux-audit-parser', preference='0'</div><div>[2016-09-06T11:59:52.411246] Registering candidate plugin; module='kvformat', context='template-func', name='format-welf', preference='0'</div><div>[2016-09-06T11:59:52.411274] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='disk-buffer.so', module='disk-buffer'</div><div>[2016-09-06T11:59:52.411433] Registering candidate plugin; module='disk-buffer', context='inner-dest', name='disk_buffer', preference='0'</div><div>[2016-09-06T11:59:52.411470] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='cef.so', module='cef'</div><div>[2016-09-06T11:59:52.411623] Registering candidate plugin; module='cef', context='template-func', name='format-cef-extension', preference='0'</div><div>[2016-09-06T11:59:52.411649] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='sdjournal.so', module='sdjournal'</div><div>[2016-09-06T11:59:52.411812] Registering candidate plugin; module='sdjournal', context='source', name='systemd-journal', preference='0'</div><div>[2016-09-06T11:59:52.411846] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='basicfuncs.so', module='basicfuncs'</div><div>[2016-09-06T11:59:52.412045] Registering candidate plugin; module='basicfuncs', context='template-func', name='grep', preference='0'</div><div>[2016-09-06T11:59:52.412056] Registering candidate plugin; module='basicfuncs', context='template-func', name='if', preference='0'</div><div>[2016-09-06T11:59:52.412061] Registering candidate plugin; module='basicfuncs', context='template-func', name='or', preference='0'</div><div>[2016-09-06T11:59:52.412067] Registering candidate plugin; module='basicfuncs', context='template-func', name='echo', preference='0'</div><div>[2016-09-06T11:59:52.412073] Registering candidate plugin; module='basicfuncs', context='template-func', name='length', preference='0'</div><div>[2016-09-06T11:59:52.412078] Registering candidate plugin; module='basicfuncs', context='template-func', name='substr', preference='0'</div><div>[2016-09-06T11:59:52.412084] Registering candidate plugin; module='basicfuncs', context='template-func', name='strip', preference='0'</div><div>[2016-09-06T11:59:52.412090] Registering candidate plugin; module='basicfuncs', context='template-func', name='sanitize', preference='0'</div><div>[2016-09-06T11:59:52.412095] Registering candidate plugin; module='basicfuncs', context='template-func', name='lowercase', preference='0'</div><div>[2016-09-06T11:59:52.412101] Registering candidate plugin; module='basicfuncs', context='template-func', name='uppercase', preference='0'</div><div>[2016-09-06T11:59:52.412106] Registering candidate plugin; module='basicfuncs', context='template-func', name='replace-delimiter', preference='0'</div><div>[2016-09-06T11:59:52.412112] Registering candidate plugin; module='basicfuncs', context='template-func', name='padding', preference='0'</div><div>[2016-09-06T11:59:52.412142] Registering candidate plugin; module='basicfuncs', context='template-func', name='+', preference='0'</div><div>[2016-09-06T11:59:52.412149] Registering candidate plugin; module='basicfuncs', context='template-func', name='-', preference='0'</div><div>[2016-09-06T11:59:52.412154] Registering candidate plugin; module='basicfuncs', context='template-func', name='*', preference='0'</div><div>[2016-09-06T11:59:52.412827] Registering candidate plugin; module='basicfuncs', context='template-func', name='/', preference='0'</div><div>[2016-09-06T11:59:52.412839] Registering candidate plugin; module='basicfuncs', context='template-func', name='%', preference='0'</div><div>[2016-09-06T11:59:52.412846] Registering candidate plugin; module='basicfuncs', context='template-func', name='sum', preference='0'</div><div>[2016-09-06T11:59:52.412852] Registering candidate plugin; module='basicfuncs', context='template-func', name='min', preference='0'</div><div>[2016-09-06T11:59:52.412858] Registering candidate plugin; module='basicfuncs', context='template-func', name='max', preference='0'</div><div>[2016-09-06T11:59:52.412864] Registering candidate plugin; module='basicfuncs', context='template-func', name='average', preference='0'</div><div>[2016-09-06T11:59:52.412870] Registering candidate plugin; module='basicfuncs', context='template-func', name='ipv4-to-int', preference='0'</div><div>[2016-09-06T11:59:52.412876] Registering candidate plugin; module='basicfuncs', context='template-func', name='indent-multi-line', preference='0'</div><div>[2016-09-06T11:59:52.412881] Registering candidate plugin; module='basicfuncs', context='template-func', name='context-length', preference='0'</div><div>[2016-09-06T11:59:52.412887] Registering candidate plugin; module='basicfuncs', context='template-func', name='env', preference='0'</div><div>[2016-09-06T11:59:52.412892] Registering candidate plugin; module='basicfuncs', context='template-func', name='template', preference='0'</div><div>[2016-09-06T11:59:52.412931] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='pseudofile.so', module='pseudofile'</div><div>[2016-09-06T11:59:52.413122] Registering candidate plugin; module='pseudofile', context='destination', name='pseudofile', preference='0'</div><div>[2016-09-06T11:59:52.413152] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='afuser.so', module='afuser'</div><div>[2016-09-06T11:59:52.413343] Registering candidate plugin; module='afuser', context='destination', name='usertty', preference='0'</div><div>[2016-09-06T11:59:52.413383] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='afamqp.so', module='afamqp'</div><div>[2016-09-06T11:59:52.413619] Registering candidate plugin; module='afamqp', context='destination', name='amqp', preference='0'</div><div>[2016-09-06T11:59:52.413658] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='afprog.so', module='afprog'</div><div>[2016-09-06T11:59:52.413834] Registering candidate plugin; module='afprog', context='source', name='program', preference='0'</div><div>[2016-09-06T11:59:52.413845] Registering candidate plugin; module='afprog', context='destination', name='program', preference='0'</div><div>[2016-09-06T11:59:52.413871] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='confgen.so', module='confgen'</div><div>[2016-09-06T11:59:52.414034] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='mod-java.so', module='mod-java'</div><div>[2016-09-06T11:59:52.414055] Registering candidate plugin; module='mod-java', context='destination', name='java', preference='0'</div><div>[2016-09-06T11:59:52.414062] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='curl.so', module='curl'</div><div>[2016-09-06T11:59:52.416694] Registering candidate plugin; module='curl', context='destination', name='http', preference='0'</div><div>[2016-09-06T11:59:52.416882] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='system-source.so', module='system-source'</div><div>[2016-09-06T11:59:52.417069] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='syslogformat.so', module='syslogformat'</div><div>[2016-09-06T11:59:52.417263] Registering candidate plugin; module='syslogformat', context='format', name='syslog', preference='0'</div><div>[2016-09-06T11:59:52.417275] Registering candidate plugin; module='syslogformat', context='parser', name='syslog-parser', preference='0'</div><div>[2016-09-06T11:59:52.417302] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='add-contextual-data.so'<wbr>, module='add-contextual-data'</div><div>[2016-09-06T11:59:52.417471] Registering candidate plugin; module='add-contextual-data', context='parser', name='add_contextual_data', preference='0'</div><div>[2016-09-06T11:59:52.417502] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='affile.so', module='affile'</div><div>[2016-09-06T11:59:52.417664] Registering candidate plugin; module='affile', context='source', name='file', preference='0'</div><div>[2016-09-06T11:59:52.417676] Registering candidate plugin; module='affile', context='source', name='pipe', preference='0'</div><div>[2016-09-06T11:59:52.417682] Registering candidate plugin; module='affile', context='destination', name='file', preference='0'</div><div>[2016-09-06T11:59:52.417689] Registering candidate plugin; module='affile', context='destination', name='pipe', preference='0'</div><div>[2016-09-06T11:59:52.417714] Reading shared object for a candidate module; path='/opt/syslog-ng/lib/<wbr>syslog-ng', fname='json-plugin.so', module='json-plugin'</div><div>[2016-09-06T11:59:52.417957] Registering candidate plugin; module='json-plugin', context='parser', name='json-parser', preference='0'</div><div>[2016-09-06T11:59:52.417973] Registering candidate plugin; module='json-plugin', context='template-func', name='format_json', preference='0'</div><div>[2016-09-06T11:59:52.418122] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>apache/apache.conf', depth='2'</div><div>[2016-09-06T11:59:52.418150] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>cim/template.conf', depth='2'</div><div>[2016-09-06T11:59:52.418576] Module loaded and initialized successfully; module='json-plugin'</div><div>[2016-09-06T11:59:52.418755] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>cim/template.conf', depth='2'</div><div>[2016-09-06T11:59:52.418783] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>elasticsearch/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.419033] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>elasticsearch/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.419066] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>graphite/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.419154] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>graphite/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.419197] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>hdfs/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.419306] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>hdfs/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.419327] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>kafka/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.419429] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>kafka/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.419448] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>loggly/loggly.conf', depth='2'</div><div>[2016-09-06T11:59:52.419579] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>loggly/loggly.conf', depth='2'</div><div>[2016-09-06T11:59:52.419598] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>logmatic/logmatic.conf', depth='2'</div><div>[2016-09-06T11:59:52.419744] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>logmatic/logmatic.conf', depth='2'</div><div>[2016-09-06T11:59:52.419765] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>mbox/mbox.conf', depth='2'</div><div>[2016-09-06T11:59:52.419840] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>mbox/mbox.conf', depth='2'</div><div>[2016-09-06T11:59:52.419858] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>nodejs/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.419940] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>nodejs/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.419957] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>pacct/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.420034] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>pacct/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.420053] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>rewrite/cc-mask.conf', depth='2'</div><div>[2016-09-06T11:59:52.420136] Global value changed; define='balabit.credit-card-<wbr>regexp', value='(?P<1>:4[0-9]{12}(?:[0-<wbr>9]{3})?|5[1-5][0-9]{14}|6(?:<wbr>011|5[0-9][0-9])[0-9]{12}|3[<wbr>47][0-9]{13}|3(?:0[0-5]|[68][<wbr>0-9])[0-9]{11}|(?:2131|1800|<wbr>35d{3})d{11})'</div><div>[2016-09-06T11:59:52.420211] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>rewrite/cc-mask.conf', depth='2'</div><div>[2016-09-06T11:59:52.420231] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>solaris/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.420321] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>solaris/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.420341] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>syslogconf/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.420588] Module loaded and initialized successfully; module='confgen'</div><div>[2016-09-06T11:59:52.420603] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>syslogconf/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.420623] Starting to read include file; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>system/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.420858] Module loaded and initialized successfully; module='system-source'</div><div>[2016-09-06T11:59:52.420873] Finishing include; filename='/opt/syslog-ng/<wbr>share/syslog-ng/include/scl/<wbr>system/plugin.conf', depth='2'</div><div>[2016-09-06T11:59:52.420889] Finishing include; filename='/opt/syslog-ng/etc/<wbr>scl.conf', depth='1'</div><div>[2016-09-06T11:59:52.421207] Module loaded and initialized successfully; module='afsocket'</div><div>[2016-09-06T11:59:52.421558] Finishing include; content='destination block elasticsearch2', depth='1'</div><div>[2016-09-06T11:59:52.421853] Compiling #unnamed sequence [log] at [/opt/syslog-ng/etc/syslog-ng.<wbr>conf:35:2]</div><div>[2016-09-06T11:59:52.421862] Compiling s_netsyslog reference [source] at [/opt/syslog-ng/etc/syslog-ng.<wbr>conf:35:2]</div><div>[2016-09-06T11:59:52.421867] Compiling s_netsyslog sequence [source] at [/opt/syslog-ng/etc/syslog-ng.<wbr>conf:15:1]</div><div>[2016-09-06T11:59:52.421892] Compiling #unnamed junction [log] at [/opt/syslog-ng/etc/syslog-ng.<wbr>conf:15:21]</div><div>[2016-09-06T11:59:52.421897] Compiling #unnamed single [log] at [/opt/syslog-ng/etc/syslog-ng.<wbr>conf:16:9]</div><div>[2016-09-06T11:59:52.421903] Compiling #unnamed single [log] at [/opt/syslog-ng/etc/syslog-ng.<wbr>conf:17:9]</div><div>[2016-09-06T11:59:52.421910] Compiling d_es reference [destination] at [/opt/syslog-ng/etc/syslog-ng.<wbr>conf:36:2]</div><div>[2016-09-06T11:59:52.421915] Compiling d_es sequence [destination] at [/opt/syslog-ng/etc/syslog-ng.<wbr>conf:27:1]</div><div>[2016-09-06T11:59:52.421918] Compiling #unnamed junction [log] at [/opt/syslog-ng/etc/syslog-ng.<wbr>conf:27:19]</div><div>[2016-09-06T11:59:52.421922] Compiling #unnamed single [log] at [#buffer:2:3]</div><div>[2016-09-06T11:59:52.422119] Module loaded and initialized successfully; module='syslogformat'</div><div>[2016-09-06T11:59:52.514371] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/syslog-ng-core.<wbr>jar;</div><div>[2016-09-06T11:59:52.514816] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic.jar;</div><div>[2016-09-06T11:59:52.514966] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/kafka.jar;</div><div>[2016-09-06T11:59:52.515107] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/syslog-ng-core.<wbr>jar;</div><div>[2016-09-06T11:59:52.515272] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/hdfs.jar;</div><div>[2016-09-06T11:59:52.515418] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/log4j-1.2.16.jar;</div><div>[2016-09-06T11:59:52.515537] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/http.jar;</div><div>[2016-09-06T11:59:52.515639] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/syslog-ng-common.<wbr>jar;</div><div>[2016-09-06T11:59:52.515752] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/dummy.jar;</div><div>[2016-09-06T11:59:52.515850] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-v2.jar;</div><div>[2016-09-06T11:59:52.515944] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-jest-<wbr>client/commons-lang3-3.4.jar;</div><div>[2016-09-06T11:59:52.516053] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-jest-<wbr>client/httpcore-nio-4.4.4.jar;</div><div>[2016-09-06T11:59:52.516159] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-jest-<wbr>client/httpasyncclient-4.1.1.<wbr>jar;</div><div>[2016-09-06T11:59:52.516286] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-jest-<wbr>client/httpclient-4.5.2.jar;</div><div>[2016-09-06T11:59:52.516423] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-jest-<wbr>client/slf4j-simple-1.7.13.<wbr>jar;</div><div>[2016-09-06T11:59:52.516541] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-jest-<wbr>client/commons-codec-1.9.jar;</div><div>[2016-09-06T11:59:52.516654] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-jest-<wbr>client/gson-2.6.2.jar;</div><div>[2016-09-06T11:59:52.516759] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-jest-<wbr>client/jest-2.0.2.jar;</div><div>[2016-09-06T11:59:52.516898] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-jest-<wbr>client/slf4j-api-1.7.13.jar;</div><div>[2016-09-06T11:59:52.517034] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-jest-<wbr>client/httpcore-4.4.4.jar;</div><div>[2016-09-06T11:59:52.517165] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-jest-<wbr>client/guava-19.0.jar;</div><div>[2016-09-06T11:59:52.517317] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-jest-<wbr>client/jest-common-2.0.2.jar;</div><div>[2016-09-06T11:59:52.517427] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/elastic-jest-<wbr>client/commons-logging-1.2.<wbr>jar;</div><div>[2016-09-06T11:59:52.558918] Add path to classpath: /opt/syslog-ng/lib/syslog-ng/<wbr>java-modules/syslog-ng-core.<wbr>jar;</div><div>[2016-09-06T11:59:52.562470] Error initializing message pipeline;</div></div><div><br></div><div><br></div><div><br></div><div><br></div><div><div>syslog-ng]# ldd /opt/syslog-ng/sbin/syslog-ng</div><div> linux-vdso.so.1 => (0x00007fff3237a000)</div><div> libsyslog-ng-3.8.so.0 => /opt/syslog-ng/lib/libsyslog-<wbr>ng-3.8.so.0 (0x00007f2fd6537000)</div><div> libsystemd.so.0 => /lib64/libsystemd.so.0 (0x00007f2fd650e000)</div><div> libssl.so.10 => /lib64/libssl.so.10 (0x00007f2fd62a1000)</div><div> libcrypto.so.10 => /lib64/libcrypto.so.10 (0x00007f2fd5eb9000)</div><div> librt.so.1 => /lib64/librt.so.1 (0x00007f2fd5cb0000)</div><div> libnsl.so.1 => /lib64/libnsl.so.1 (0x00007f2fd5a97000)</div><div> libgmodule-2.0.so.0 => /lib64/libgmodule-2.0.so.0 (0x00007f2fd5893000)</div><div> libgthread-2.0.so.0 => /lib64/libgthread-2.0.so.0 (0x00007f2fd5690000)</div><div> libglib-2.0.so.0 => /lib64/libglib-2.0.so.0 (0x00007f2fd5359000)</div><div> libevtlog.so.0 => /opt/syslog-ng/lib/libevtlog.<wbr>so.0 (0x00007f2fd5154000)</div><div> libpcre.so.1 => /lib64/libpcre.so.1 (0x00007f2fd4ef2000)</div><div> libdl.so.2 => /lib64/libdl.so.2 (0x00007f2fd4cee000)</div><div> libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f2fd4ad2000)</div><div> libc.so.6 => /lib64/libc.so.6 (0x00007f2fd470f000)</div><div> /lib64/ld-linux-x86-64.so.2 (0x00007f2fd67f2000)</div><div> libcap.so.2 => /lib64/libcap.so.2 (0x00007f2fd450a000)</div><div> libm.so.6 => /lib64/libm.so.6 (0x00007f2fd4208000)</div><div> libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f2fd3fe2000)</div><div> liblzma.so.5 => /lib64/liblzma.so.5 (0x00007f2fd3dbd000)</div><div> libgcrypt.so.11 => /lib64/libgcrypt.so.11 (0x00007f2fd3b3c000)</div><div> libgpg-error.so.0 => /lib64/libgpg-error.so.0 (0x00007f2fd3936000)</div><div> libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f2fd371c000)</div><div> libdw.so.1 => /lib64/libdw.so.1 (0x00007f2fd34d5000)</div><div> libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007f2fd32be000)</div><div> libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f2fd3072000)</div><div> libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f2fd2d8d000)</div><div> libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f2fd2b88000)</div><div> libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f2fd2956000)</div><div> libz.so.1 => /lib64/libz.so.1 (0x00007f2fd2740000)</div><div> libattr.so.1 => /lib64/libattr.so.1 (0x00007f2fd253a000)</div><div> libelf.so.1 => /lib64/libelf.so.1 (0x00007f2fd2324000)</div><div> libbz2.so.1 => /lib64/libbz2.so.1 (0x00007f2fd2113000)</div><div> libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f2fd1f04000)</div><div> libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f2fd1d00000</div></div><div><br></div></div><br>______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>