<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi,<div class=""><br class=""></div><div class="">Im still no luck either :(</div><div class=""><br class=""></div><div class="">Tried assorts but no luck </div><div class=""><br class=""></div><div class="">regards</div><div class=""><br class=""></div><div class="">Simon</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 8 Nov 2016, at 12:10, Varugis Kurien <<a href="mailto:vkurien@midfinsystems.com" class="">vkurien@midfinsystems.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div id="divtagdefaultwrapper" dir="ltr" style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; font-size: 12pt; font-family: Calibri, Arial, Helvetica, sans-serif;" class=""><div style="margin-top: 0px; margin-bottom: 0px;" class="">Hi Laszlo,</div><div style="margin-top: 0px; margin-bottom: 0px;" class="">Have you been able to get this to work? I am in exactly the same position as Simon - I need the ability to parse Linux audit logs in syslog-ng.<span class="Apple-converted-space"> </span><br class=""></div></div><hr tabindex="-1" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline-block; width: 1821.8125px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class=""></span><div id="divRplyFwdMsg" dir="ltr" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><font face="Calibri, sans-serif" style="font-size: 11pt;" class=""><b class="">From:</b><span class="Apple-converted-space"> </span>syslog-ng <<a href="mailto:syslog-ng-bounces@lists.balabit.hu" class="">syslog-ng-bounces@lists.balabit.hu</a>> on behalf of Laszlo Budai <<a href="mailto:laszlo.budai@outlook.com" class="">laszlo.budai@outlook.com</a>><br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Saturday, November 5, 2016 1:59:09 PM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span>Syslog-ng users' and developers' mailing list<br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>Re: [syslog-ng] unable to install syslog-ng ubuntu 16.04</font><div class=""> </div></div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><div id="compose" style="padding-left: 16px; padding-right: 16px; padding-bottom: 8px;" class="" applecontenteditable="true">Hi,</div><div id="compose" style="padding-left: 16px; padding-right: 16px; padding-bottom: 8px;" class="" applecontenteditable="true">in docker it is not working... </div><div id="compose" style="padding-left: 16px; padding-right: 16px; padding-bottom: 8px;" class="" applecontenteditable="true">I'll try to fix this issue. </div><div id="compose" style="padding-left: 16px; padding-right: 16px; padding-bottom: 8px;" class="" applecontenteditable="true"><br class=""></div><div id="compose" style="padding-left: 16px; padding-right: 16px; padding-bottom: 8px;" class="" applecontenteditable="true">regards,</div><div id="compose" style="padding-left: 16px; padding-right: 16px; padding-bottom: 8px;" class="" applecontenteditable="true">Laszlo Budai</div><div id="compose" style="padding-left: 16px; padding-right: 16px; padding-bottom: 8px;" class="" applecontenteditable="true"><br class=""></div><div class="gmail_quote">_____________________________<br class="">From: Scheidler, Balázs <<a dir="ltr" href="mailto:balazs.scheidler@balabit.com" x-apple-data-detectors="true" x-apple-data-detectors-type="link" x-apple-data-detectors-result="0" class="">balazs.scheidler@balabit.com</a>><br class="">Sent: Saturday, November 5, 2016 9:21 AM<br class="">Subject: Re: [syslog-ng] unable to install syslog-ng ubuntu 16.04n <br class="">To: László Budai <<a dir="ltr" href="mailto:lbudai@balabit.hu" x-apple-data-detectors="true" x-apple-data-detectors-type="link" x-apple-data-detectors-result="1" class="">lbudai@balabit.hu</a>>, Syslog-ng users' and developers' mailing list <<a dir="ltr" href="mailto:syslog-ng@lists.balabit.hu" x-apple-data-detectors="true" x-apple-data-detectors-type="link" x-apple-data-detectors-result="2" class="">syslog-ng@lists.balabit.hu</a>><br class=""><br class=""><br class=""><div dir="ltr" class=""><div class=""><div class=""><div class=""><div class="">Indeed, I think the problem is that syslog-ng core depends on syslog-ng-mod-journal, which recursively depends on syslog-ng-core through a Provides line.<br class=""><br class=""></div>Hmm.. the funny part that a week ago I successfully installed the same package on one of my servers, but now in a clean docker container I couldn't do that.<br class=""><br class=""></div>I have a workaround, attached you'll find an equivs compatible control file, that provides the missing dependency, once that is installed, "apt-get install syslog-ng" works.<br class=""><br class=""></div>It goes like this:<br class=""></div><br class=""><div class=""><div class=""># dpkg -i syslog-ng-abi-3.8-0_3.8.1-1_all.deb<span class="Apple-converted-space"> </span><br class="">Selecting previously unselected package syslog-ng-abi-3.8-0.<br class="">(Reading database ... 7256 files and directories currently installed.)<br class="">Preparing to unpack syslog-ng-abi-3.8-0_3.8.1-1_all.deb ...<br class="">Unpacking syslog-ng-abi-3.8-0 (3.8.1-1) ...<br class="">Setting up syslog-ng-abi-3.8-0 (3.8.1-1) ...<br class=""></div><div class=""># apt-get install syslog-ng-core<br class="">Reading package lists... Done<br class="">Building dependency tree <span class="Apple-converted-space"> </span><br class="">Reading state information... Done<br class="">The following additional packages will be installed:<br class=""> cron libevtlog0 libffi6 libglib2.0-0 libglib2.0-data libicu55 libivykis0 libnet1 libpopt0 libssl1.0.0 libwrap0 libxml2 logrotate sgml-base<br class=""> shared-mime-info syslog-ng-mod-journal tcpd xdg-user-dirs xml-core<br class="">Suggested packages:<br class=""> anacron checksecurity exim4 | postfix | mail-transport-agent mailx sgml-base-doc syslog-ng-mod-sql syslog-ng-mod-mongodb syslog-ng-mod-json<br class=""> syslog-ng-mod-smtp syslog-ng-mod-amqp syslog-ng-mod-geoip syslog-ng-mod-redis syslog-ng-mod-stomp syslog-ng-mod-riemann syslog-ng-mod-graphite<br class=""> syslog-ng-mod-python syslog-ng-mod-java syslog-ng-mod-java-common-lib syslog-ng-mod-elastic syslog-ng-mod-hdfs syslog-ng-mod-kafka syslog-ng-mod-http<br class=""> syslog-ng-mod-curl syslog-ng-mod-kvformat syslog-ng-mod-add-contextual-data debhelper<br class="">The following NEW packages will be installed:<br class=""> cron libevtlog0 libffi6 libglib2.0-0 libglib2.0-data libicu55 libivykis0 libnet1 libpopt0 libssl1.0.0 libwrap0 libxml2 logrotate sgml-base<br class=""> shared-mime-info syslog-ng-core syslog-ng-mod-journal tcpd xdg-user-dirs xml-core<br class="">0 upgraded, 20 newly installed, 0 to remove and 11 not upgraded.<br class="">Need to get 11.9 MB of archives.<br class="">After this operation, 49.5 MB of additional disk space will be used.<br class="">Do you want to continue? [Y/n]<span class="Apple-converted-space"> </span><br class=""><br class=""></div><div class=""><br class=""></div><div class="">The "syslog-ng-core" package only contains a subset of the syslog-ng package, pulling in a smaller set of dependencies, whereas syslog-ng is the full set.<br class=""><br class=""></div><div class="">The abi package here is just a fake one, I'll make sure this packaging issue gets fixed.<br class=""></div><div class=""><br class=""></div></div></div><div class="gmail_extra"><br class=""><div class=""><div class="gmail_signature"><div dir="ltr" class="">--<span class="Apple-converted-space"> </span><br class="">Bazsi<br class=""></div></div></div><br class=""><div class="gmail_quote">On Thu, Nov 3, 2016 at 10:25 PM, Simon Smith<span class="Apple-converted-space"> </span><span dir="ltr" class=""><<a href="mailto:simonsmith5521@gmail.com" class="">simonsmith5521@gmail.com</a>></span><span class="Apple-converted-space"> </span>wrote:<br class=""><blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; padding-left: 1ex;"><div style="word-wrap: break-word;" class="">Hi All<div class=""><br class=""></div><div class="">has anyone been able to install syslog-ng 3.8 successfully on ubuntu 16.04 ?</div><div class=""><br class=""></div><div class="">I’m using the link from the mailing list a few months ago but again no luck - <a href="http://lists.balabit.hu/pipermail/syslog-ng/2016-August/023150.html" class="">http://lists.balabit.hu/<wbr class="">pipermail/syslog-ng/2016-<wbr class="">August/023150.html</a></div><div class=""><br class=""></div><div class="">no matter what packages i try to install it just won’t work</div><div class=""><br class=""></div><div class="">any ideas?</div><div class=""><br class=""></div><div class=""><div class="">root@syslog:~# apt-get install syslog-ng</div><div class="">Reading package lists... Done</div><div class="">Building dependency tree </div><div class="">Reading state information... Done</div><div class="">Some packages could not be installed. This may mean that you have</div><div class="">requested an impossible situation or if you are using the unstable</div><div class="">distribution that some required packages have not yet been created</div><div class="">or been moved out of Incoming.</div><div class="">The following information may help to resolve the situation:</div><div class=""><br class=""></div><div class="">The following packages have unmet dependencies:</div><div class=""> syslog-ng : Depends: syslog-ng-core (>= 3.8.1) but it is not going to be installed</div><div class=""> Depends: syslog-ng-mod-sql but it is not going to be installed</div><div class=""> Depends: syslog-ng-mod-mongodb but it is not going to be installed</div><div class=""> Depends: syslog-ng-mod-json but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-journal but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-smtp but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-amqp but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-geoip but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-redis but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-stomp but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-riemann but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-graphite but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-python but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-java but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-java-common-lib but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-elastic but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-hdfs but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-kafka but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-http but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-curl but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-kvformat but it is not going to be installed</div><div class=""> Recommends: syslog-ng-mod-add-contextual-<wbr class="">data but it is not going to be installed</div><div class="">E: Unable to correct problems, you have held broken packages.</div><div class="">root@syslog:~# apt-get install syslog-ng-core</div><div class="">Reading package lists... Done</div><div class="">Building dependency tree </div><div class="">Reading state information... Done</div><div class="">Some packages could not be installed. This may mean that you have</div><div class="">requested an impossible situation or if you are using the unstable</div><div class="">distribution that some required packages have not yet been created</div><div class="">or been moved out of Incoming.</div><div class="">The following information may help to resolve the situation:</div><div class=""><br class=""></div><div class="">The following packages have unmet dependencies:</div><div class=""> syslog-ng-core : Depends: syslog-ng-mod-journal but it is not going to be installed</div><div class="">E: Unable to correct problems, you have held broken packages.</div><div class="">root@syslog:~# apt-get install syslog-ng-mod-journal</div><div class="">Reading package lists... Done</div><div class="">Building dependency tree </div><div class="">Reading state information... Done</div><div class="">Some packages could not be installed. This may mean that you have</div><div class="">requested an impossible situation or if you are using the unstable</div><div class="">distribution that some required packages have not yet been created</div><div class="">or been moved out of Incoming.</div><div class="">The following information may help to resolve the situation:</div><div class=""><br class=""></div><div class="">The following packages have unmet dependencies:</div><div class=""> syslog-ng-mod-journal : Depends: syslog-ng-abi-3.8-0 but it is not installable</div><div class="">E: Unable to correct problems, you have held broken packages.</div><div class="">root@syslog:~# apt-get install syslog-ng syslog-ng-core syslog-ng-mod-sql syslog-ng-mod-mongodb syslog-ng-mod-json syslog-ng-mod-journal</div></div><div class=""><div class="">Reading package lists... Done</div><div class="">Building dependency tree </div><div class="">Reading state information... Done</div><div class="">Some packages could not be installed. This may mean that you have</div><div class="">requested an impossible situation or if you are using the unstable</div><div class="">distribution that some required packages have not yet been created</div><div class="">or been moved out of Incoming.</div><div class="">The following information may help to resolve the situation:</div><div class=""><br class=""></div><div class="">The following packages have unmet dependencies:</div><div class=""> syslog-ng-mod-journal : Depends: syslog-ng-abi-3.8-0 but it is not installable</div><div class=""> syslog-ng-mod-json : Depends: syslog-ng-abi-3.8-0 but it is not installable</div><div class=""> syslog-ng-mod-mongodb : Depends: syslog-ng-abi-3.8-0 but it is not installable</div><div class=""> syslog-ng-mod-sql : Depends: syslog-ng-abi-3.8-0 but it is not installable</div><div class="">E: Unable to correct problems, you have held broken packages.</div><div class="">root@syslog:~# </div></div><div class=""><br class=""></div><div class="">regards</div><div class=""><br class=""></div><div class="">Simon - Hestor Ltd</div></div><br class="">______________________________<wbr class="">______________________________<wbr class="">__________________<br class="">Member info:<span class="Apple-converted-space"> </span><a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" class="">https://lists.balabit.hu/<wbr class="">mailman/listinfo/syslog-ng</a><br class="">Documentation:<span class="Apple-converted-space"> </span><a href="http://www.balabit.com/support/documentation/?product=syslog-ng" class="">http://www.balabit.com/<wbr class="">support/documentation/?<wbr class="">product=syslog-ng</a><br class="">FAQ:<span class="Apple-converted-space"> </span><a href="http://www.balabit.com/wiki/syslog-ng-faq" class="">http://www.balabit.com/wiki/<wbr class="">syslog-ng-faq</a><br class=""><br class=""><br class=""></blockquote></div><br class=""></div><br class=""><br class=""></div></div><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">______________________________________________________________________________</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Member info:<span class="Apple-converted-space"> </span></span><a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Documentation:<span class="Apple-converted-space"> </span></span><a href="http://www.balabit.com/support/documentation/?product=syslog-ng" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">FAQ:<span class="Apple-converted-space"> </span></span><a href="http://www.balabit.com/wiki/syslog-ng-faq" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">http://www.balabit.com/wiki/syslog-ng-faq</a></div></blockquote></div><br class=""></div></body></html>