<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mv="http://macVmlSchemaUri" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Microsoft Sans Serif";
panose-1:2 11 6 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:Calibri;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
p.imprintuniqueid, li.imprintuniqueid, div.imprintuniqueid
{mso-style-name:imprintuniqueid;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle18
{mso-style-type:personal;
font-family:Calibri;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal;
font-family:Calibri;
color:#1F497D;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:Calibri;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks, I'll have them try this!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Odd that none of our test servers are exhibiting this behavior though.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span style="color:black">syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Damian Bell <Damian.Bell@clarksons.com><br>
<b>Reply-To: </b>Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu><br>
<b>Date: </b>Saturday, February 11, 2017 at 10:47 AM<br>
<b>To: </b>Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu><br>
<b>Subject: </b>Re: [syslog-ng] Syslog-ng, centos7 and systemd seem to hate each other<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Times New Roman""><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-family:"Times New Roman""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">I had a similar problem recently with the java environment variable with systemd and starting syslog-ng to output to elasticsearch, which required modification of the /usr/lib/systemd/system/syslog-ng.service
file to contain the following:- </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Environment=LD_LIBRARY_PATH=/usr/java/jre1.8.0_112/lib/amd64/server</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Perhaps your python environment variables also need exporting to this file?
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Times New Roman""><o:p> </o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse">
<tbody>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;color:#595959">Damian</span></b><span style="font-family:"Times New Roman""> </span><b><span style="font-size:10.0pt;color:#595959">Bell</span></b><span style="font-family:"Times New Roman""><br>
</span><span style="font-size:10.0pt;color:#595959">Infrastructure Engineer | Support | H Clarkson & Co Ltd</span><span style="font-family:"Times New Roman""><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-family:"Times New Roman""><br>
</span><span style="font-size:10.0pt;color:#404040">Email: </span><span style="font-size:10.0pt;color:#0070C0"><a href="mailto:Damian.Bell@clarksons.com" title="Click to send email to Damian Bell"><span style="color:#0070C0">Damian.Bell@clarksons.com</span></a></span><span style="font-family:"Times New Roman""><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:"Times New Roman""><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt">From:</span></b><span style="font-size:11.0pt"> syslog-ng [mailto:syslog-ng-bounces@lists.balabit.hu]
<b>On Behalf Of </b>Clayton Dukes<br>
<b>Sent:</b> 10 February 2017 21:32<br>
<b>To:</b> Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu><br>
<b>Subject:</b> [syslog-ng] Syslog-ng, centos7 and systemd seem to hate each other</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">…or at the very least, say bad things when the other is not looking :)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I did a bit of googling for this and found other people with similar issues, but could not find the fix.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">This is on a cos7.0 box (not 7.2) running syslog-ng v3.9 (user did have v3.5 but I tried upgrading him to resolve this).</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">If I run syslog-ng -Fdve it works fine and sends everything to our python program destination</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">However, if I use the systemd script provided with syslog-ng, then I get nothing.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">If I tell sng to just log to a file (no filters, etc.), then it works.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">If I tell sng to just use the program dest (no filters, etc.) it does NOT work.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">If I do a 'systemctl stop syslog-ng' and then just simply type 'syslog-ng' (no foreground, debug, etc. switches) from the command line, it works fine.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Rather confusing, but I can't see why the systemctl file is not working as it should.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Any ideas?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Other references:</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><a href="https://wiki.archlinux.org/index.php/syslog-ng">https://wiki.archlinux.org/index.php/syslog-ng</a></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><a href="https://bbs.archlinux.org/viewtopic.php?id=187057">https://bbs.archlinux.org/viewtopic.php?id=187057</a></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><a href="http://serverfault.com/questions/760383/syslog-ng-working-as-foreground-process-but-not-as-daemon">http://serverfault.com/questions/760383/syslog-ng-working-as-foreground-process-but-not-as-daemon</a></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Times New Roman";color:#AFABAB"> </span><o:p></o:p></p>
<p class="MsoNormal">-Clayton<o:p></o:p></p>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:7.5pt;font-family:"Times New Roman"">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal"><span style="font-size:7.5pt;font-family:"Microsoft Sans Serif"">This message is private and confidential. If you have received it in error, you are on notice of its status. Please notify us immediately by reply email and then delete this
message from your system. Please do not copy it or use it for any purposes, or disclose its contents to any other person: to do so could be a breach of confidence.<br>
<br>
Emails may be monitored.<br>
<br>
Details of Clarkson group companies and their regulators (where applicable) can be found at this url:
</span><span style="font-family:"Times New Roman""><a href="http://www.clarksons.com/disclosure/" title="Disclosure"><span style="font-size:7.5pt;font-family:"Microsoft Sans Serif"">Disclosure</span></a>
<o:p></o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-family:"Times New Roman"">
<hr size="2" width="100%" align="center">
</span></div>
</div>
</body>
</html>