<div dir="ltr"><div><div><div><div><div>Hi,<br><br></div>A weird question:<br></div>Is it possible that your S3 bucket uses a case-insensitive file system? I'm not really familiar with S3, but we had issues building ivykis e.g. on case-insensitive HFS:<br><br><a href="https://github.com/buytenh/ivykis/issues/7">https://github.com/buytenh/ivykis/issues/7</a><br><br></div>A workaround would be to build ivykis "in-tree" separately, and configure syslog-ng to use the system ivykis:<br><br></div>./configure --with-ivykis=system ...<br><br>--<br></div>László Várady<br><div><div><div><div><div><div><br><div class="gmail_quote"><div dir="ltr">On Tue, Feb 27, 2018 at 1:54 AM Ronald Fenner <<a href="mailto:rfenner@gamecircus.com">rfenner@gamecircus.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">Yes I'm still getting the error.<div><div>-ebs: Making all in contrib</div><div>1519691695,,ui,message, amazon-ebs: Making all in iv_getaddrinfo</div><div>1519691695,,ui,message, amazon-ebs: gcc -DHAVE_CONFIG_H -I. -I../.. -D_GNU_SOURCE -I../../src/include -I../../src/include -g -O2 -Wall -pthread -Wno-error -MT test.o -M$</div><div>1519691695,,ui,message, amazon-ebs: mv -f .deps/test.Tpo .deps/test.Po</div><div>1519691695,,ui,message, amazon-ebs: gcc -DHAVE_CONFIG_H -I. -I../.. -D_GNU_SOURCE -I../../src/include -I../../src/include -g -O2 -Wall -pthread -Wno-error -MT iv_getadd$</div><div>1519691695,,ui,message, amazon-ebs: mv -f .deps/iv_getaddrinfo.Tpo .deps/iv_getaddrinfo.Po</div><div>1519691695,,ui,message, amazon-ebs: /bin/sh ../../libtool --tag=CC --mode=link gcc -g -O2 -Wall -pthread -Wno-error -o test test.o iv_getaddrinfo.o ../../src/libivyk$</div><div>1519691695,,ui,message, amazon-ebs: libtool: link: gcc -g -O2 -Wall -pthread -Wno-error -o test test.o iv_getaddrinfo.o ../../src/.libs/libivykis.a -lpthread_nonshared -p$</div><div>1519691695,,ui,message, amazon-ebs: Making all in kojines</div><div>1519691695,,ui,message, amazon-ebs: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/include -I../../src/include -g -O2 -Wall -pthread -Wno-error -MT main.o -MD -MP -MF .dep$</div><div>1519691695,,ui,message, amazon-ebs: mv -f .deps/main.Tpo .deps/main.Po</div><div>1519691695,,ui,message, amazon-ebs: gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/include -I../../src/include -g -O2 -Wall -pthread -Wno-error -MT kojines.o -MD -MP -MF .$</div><div>1519691695,,ui,message, amazon-ebs: mv -f .deps/kojines.Tpo .deps/kojines.Po</div><div>1519691695,,ui,message, amazon-ebs: /bin/sh ../../libtool --tag=CC --mode=link gcc -g -O2 -Wall -pthread -Wno-error -o kojines main.o kojines.o ../../src/libivykis.l$</div><div>1519691695,,ui,message, amazon-ebs: libtool: link: gcc -g -O2 -Wall -pthread -Wno-error -o kojines main.o kojines.o ../../src/.libs/libivykis.a -lpthread_nonshared -pthre$</div><div>1519691695,,ui,message, amazon-ebs: make[6]: Nothing to be done for `all-am'.</div><div>1519691695,,ui,message, amazon-ebs: Making all in misc</div><div>1519691695,,ui,message, amazon-ebs: make[5]: Nothing to be done for `all'.</div><div>1519691695,,ui,message, amazon-ebs: Making all in man3</div><div>1519691695,,ui,message, amazon-ebs: make[5]: *** No rule to make target `IV_FD_PUMP_INIT.3'%!(PACKER_COMMA) needed by `all-am'. Stop.</div><div>1519691695,,ui,message, amazon-ebs: make[4]: *** [all-recursive] Error 1</div><div>1519691695,,ui,message, amazon-ebs: make[3]: *** [all] Error 2</div><div>1519691695,,ui,message, amazon-ebs: make[2]: *** [lib/ivykis/src/<a href="http://libivykis.la" target="_blank">libivykis.la</a>] Error 2</div><div>1519691695,,ui,message, amazon-ebs: make[1]: *** [all-recursive] Error 1</div><div>1519691695,,ui,message, amazon-ebs: make: *** [all] Error 2</div><div>1519691695,,ui,message, amazon-ebs: Failed to make syslog-ng</div><div><br></div><div>The odd thing when I was testing the edit where I download the archive then unzipped it an edited the file it seemed to work ok.</div><div>But when I downloaded made the change re archived it and put in an S3 bucket I get this error.</div></div></div><div style="word-wrap:break-word"><div><div><br></div><div><br></div><div>
<div style="color:rgb(0,0,0);font-family:Helvetica;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);font-family:Helvetica;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);font-family:Helvetica;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-variant-east-asian:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div><div>Ronald Fenner</div><div>Network Architect</div><div>Game Circus LLC.</div></div><div><br></div><div><a href="mailto:rfenner@gamecircus.com" target="_blank">rfenner@gamecircus.com</a></div></div></div></div>
</div>
<br></div></div><div style="word-wrap:break-word"><div><div><blockquote type="cite"><div>On Feb 26, 2018, at 1:25 PM, Laszlo Budai <<a href="mailto:laszlo.budai@outlook.com" target="_blank">laszlo.budai@outlook.com</a>> wrote:</div><br class="m_4687585968925227518Apple-interchange-newline"><div>
<div style="word-wrap:break-word">
<div id="m_4687585968925227518compose-container" style="direction:ltr">
<span><span></span></span>
<div>
<div>
<div style="direction:ltr">Hi,</div>
<div><br>
</div>
<div style="direction:ltr">today we removed the Shield support from syslog-ng OSE: <a href="https://github.com/balabit/syslog-ng/pull/1895" target="_blank">https://github.com/balabit/syslog-ng/pull/1895</a>.</div>
<div><br>
</div>
<div style="direction:ltr">You mentioned an ivykis(Lithuanian word, meaning: event) error. Did it work finally?</div>
<div><br>
</div>
<div style="direction:ltr">regards,</div>
<div style="direction:ltr">Laszlo Budai</div>
</div>
<div><br>
</div>
<div class="m_4687585968925227518acompli_signature">Get <a href="https://aka.ms/o0ukef" target="_blank">Outlook for iOS</a></div>
</div>
</div>
<hr style="display:inline-block;width:98%">
<div id="m_4687585968925227518divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif"><b>From:</b> syslog-ng <<a href="mailto:syslog-ng-bounces@lists.balabit.hu" target="_blank">syslog-ng-bounces@lists.balabit.hu</a>> on behalf of Ronald Fenner <<a href="mailto:rfenner@gamecircus.com" target="_blank">rfenner@gamecircus.com</a>><br>
<b>Sent:</b> Monday, February 26, 2018 7:48:45 AM<br>
<b>To:</b> Syslog-ng users' and developers' mailing list<br>
<b>Subject:</b> Re: [syslog-ng] Problem building syslog-ng 3.11.1 and elastic search</font>
<div> </div>
</div>
<div>Thanks I'll give it another shot. I had tried modifying the settings.gradle but the the build kicked out an error about ivy kiss (think that was the name) in I think the tests when they were built and I didn't spend the time to find the make command to
skip them.
<div>If I have problems with the attempt I'll post the error I get.<br>
<div><br>
</div>
<div>Apparently the plugin isn't listed In the maven repo either which did seem to be available as below you can see it searched there for it as well.<br>
<div><br>
<div>
<div style="font-family:Helvetica;font-style:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word">
<div style="font-family:Helvetica;font-style:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word">
<div style="font-family:Helvetica;font-style:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word">
<div>
<div>Ronald Fenner</div>
<div>Network Architect</div>
<div>Game Circus LLC.</div>
</div>
<div><br>
</div>
<div><a href="mailto:rfenner@gamecircus.com" target="_blank">rfenner@gamecircus.com</a></div>
</div>
</div>
</div>
</div>
<br>
<div>
<blockquote type="cite">
<div>On Feb 26, 2018, at 12:33 AM, Kókai Péter <<a href="mailto:peter.kokai@balabit.com" target="_blank">peter.kokai@balabit.com</a>> wrote:</div>
<br class="m_4687585968925227518Apple-interchange-newline">
<div>
<div dir="ltr">Hello,
<div><br>
</div>
<div>There is a open issue at github(<a href="https://github.com/balabit/syslog-ng/issues/1891" target="_blank">https://github.com/balabit/syslog-ng/issues/1891</a>), you can follow up there. Also it has a patch, that could solve this issue temporary.</div>
<div><br>
</div>
<div>Based on your use case</div>
<div>* if you do not need java and/or java based solution (elasticsearch, kafka, hdfs) you could either *--disable-java* overall</div>
<div>* if you need java but not the elasticsearch you could remove the elastic-v2 from compilation via editting: *modules/java-modules/settings.gradle*</div>
<div>* if you need those there is a patch in the issue, that uses atlassian instead of the elasticsearch (which seems down)</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>--</div>
<div>Kokan</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr">On Fri, Feb 23, 2018 at 2:08 AM Ronald Fenner <<a href="mailto:rfenner@gamecircus.com" target="_blank">rfenner@gamecircus.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">So I tried using the latest version 3.13.2 downloaded from GitHub
<div>And again get the same error</div>
<div><br>
</div>
<div>
<div>FAILURE: Build failed with an exception.</div>
<div><br>
</div>
<div>* What went wrong:</div>
</div>
</div>
<div style="word-wrap:break-word">
<div>
<div>Could not resolve all files for configuration ':elastic-v2:compileClasspath'.</div>
<div>> Could not find org.elasticsearch.plugin:shield:2.4.0.</div>
<div> Searched in the following locations:</div>
</div>
</div>
<div style="word-wrap:break-word">
<div>
<div> file:/usr/lib/syslog-ng-java-compile-deps-mvn-repo/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.pom</div>
<div> file:/usr/lib/syslog-ng-java-compile-deps-mvn-repo/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.jar</div>
<div> file:/root/eventlog-0.2.12/syslog-ng-3.13.2/modules/java/syslog-ng-core/libs/shield-2.4.0.jar</div>
<div> file:/root/eventlog-0.2.12/syslog-ng-3.13.2/modules/java/syslog-ng-core/libs/shield.jar</div>
<div> file:/root/eventlog-0.2.12/syslog-ng-3.13.2/modules/java-modules/common/gradle/libs/shield-2.4.0.jar</div>
<div> file:/root/eventlog-0.2.12/syslog-ng-3.13.2/modules/java-modules/common/gradle/libs/shield.jar</div>
<div> <a href="https://repo1.maven.org/maven2/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.pom" target="_blank">
https://repo1.maven.org/maven2/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.pom</a></div>
<div> <a href="https://repo1.maven.org/maven2/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.jar" target="_blank">
https://repo1.maven.org/maven2/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.jar</a></div>
<div> <a href="http://maven.elasticsearch.org/releases/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.pom" target="_blank">
http://maven.elasticsearch.org/releases/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.pom</a></div>
<div> <a href="http://maven.elasticsearch.org/releases/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.jar" target="_blank">
http://maven.elasticsearch.org/releases/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.jar</a></div>
<div> Required by:</div>
<div> project :elastic-v2</div>
<div><br>
</div>
<div>* Try:</div>
<div>Run with --stacktrace option to get the stack trace. Run with --info or --debug option to get more log output.</div>
<div><br>
</div>
<div><br>
</div>
<div>So it seems we can't build any version of syslog-ng because of this missing plugin.</div>
<div> Any thoughts?</div>
</div>
</div>
<div style="word-wrap:break-word">
<div>
<div><br>
</div>
<div>
<div style="font-family:Helvetica;font-style:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word">
<div style="font-family:Helvetica;font-style:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word">
<div style="font-family:Helvetica;font-style:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word">
<div>
<div>Ronald Fenner</div>
<div>Network Architect</div>
<div>Game Circus LLC.</div>
</div>
<div><br>
</div>
<div><a href="mailto:rfenner@gamecircus.com" target="_blank">rfenner@gamecircus.com</a></div>
</div>
</div>
</div>
</div>
<br>
</div>
</div>
<div style="word-wrap:break-word">
<div>
<div>
<blockquote type="cite">
<div>On Feb 22, 2018, at 5:14 PM, Ronald Fenner <<a href="mailto:rfenner@gamecircus.com" target="_blank">rfenner@gamecircus.com</a>> wrote:</div>
<br class="m_4687585968925227518m_-4166212961185941593Apple-interchange-newline">
<div>
<div style="word-wrap:break-word">I have script that builds syslog-ng and it was working fine but apparently a plugin for elastic search seems to have gone missing and I'm getting this error:
<div><br>
<div>
<div>1519328565,,ui,message, amazon-ebs: Could not resolve all files for configuration ':elastic-v2:compileClasspath'.</div>
<div>1519328565,,ui,message, amazon-ebs: > Could not find org.elasticsearch.plugin:shield:2.4.0.</div>
<div>1519328565,,ui,message, amazon-ebs: Searched in the following locations:</div>
<div>1519328565,,ui,message, amazon-ebs: file:/usr/lib/syslog-ng-java-compile-deps-mvn-repo/org/elasticsearch/plugin/shield$</div>
<div>1519328565,,ui,message, amazon-ebs: file:/usr/lib/syslog-ng-java-compile-deps-mvn-repo/org/elasticsearch/plugin/shield$</div>
<div>1519328565,,ui,message, amazon-ebs: file:/home/ec2-user/eventlog-0.2.12/syslog-ng-3.11.1/modules/java/syslog-ng-core/l$</div>
<div>1519328565,,ui,message, amazon-ebs: file:/home/ec2-user/eventlog-0.2.12/syslog-ng-3.11.1/modules/java/syslog-ng-core/l$</div>
<div>1519328565,,ui,message, amazon-ebs: file:/home/ec2-user/eventlog-0.2.12/syslog-ng-3.11.1/modules/java-modules/common/g$</div>
<div>1519328565,,ui,message, amazon-ebs: file:/home/ec2-user/eventlog-0.2.12/syslog-ng-3.11.1/modules/java-modules/common/g$</div>
<div>1519328565,,ui,message, amazon-ebs: <a href="https://repo1.maven.org/maven2/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.$" target="_blank">
https://repo1.maven.org/maven2/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.$</a></div>
<div>1519328565,,ui,message, amazon-ebs: <a href="https://repo1.maven.org/maven2/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.$" target="_blank">
https://repo1.maven.org/maven2/org/elasticsearch/plugin/shield/2.4.0/shield-2.4.0.$</a></div>
<div>1519328565,,ui,message, amazon-ebs: <a href="http://maven.elasticsearch.org/releases/org/elasticsearch/plugin/shield/2.4.0/shie$" target="_blank">
http://maven.elasticsearch.org/releases/org/elasticsearch/plugin/shield/2.4.0/shie$</a></div>
<div>1519328565,,ui,message, amazon-ebs: 9 actionable tasks: 9 executed</div>
<div>1519328565,,ui,message, amazon-ebs: <a href="http://maven.elasticsearch.org/releases/org/elasticsearch/plugin/shield/2.4.0/shie$" target="_blank">
http://maven.elasticsearch.org/releases/org/elasticsearch/plugin/shield/2.4.0/shie$</a></div>
<div>1519328565,,ui,message, amazon-ebs: Required by:</div>
<div>1519328565,,ui,message, amazon-ebs: project :elastic-v2</div>
<div>1519328565,,ui,message, amazon-ebs:</div>
<div>1519328565,,ui,message, amazon-ebs: * Try:</div>
<div>1519328565,,ui,message, amazon-ebs: Run with --stacktrace option to get the stack trace. Run with --info or --debug option t$</div>
<div>1519328565,,ui,message, amazon-ebs:</div>
<div><br>
</div>
<div>Is there a way to disable elasticsearch module specifically?</div>
<div><br>
</div>
<div>
<div style="font-family:Helvetica;font-style:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word">
<div style="font-family:Helvetica;font-style:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word">
<div style="font-family:Helvetica;font-style:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word">
<div>
<div>Ronald Fenner</div>
<div>Network Architect</div>
<div>Game Circus LLC.</div>
</div>
<div><br>
</div>
<div><a href="mailto:rfenner@gamecircus.com" target="_blank">rfenner@gamecircus.com</a></div>
</div>
</div>
</div>
</div>
<br>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">
https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">
http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">
http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote>
</div>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">
https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">
http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
______________________________________________________________________________<br>Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br><br></div></blockquote></div><br></div></div>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div></div></div></div></div></div></div></div>