<div dir="ltr">ok, that did the trick, thank you very much. <br><br></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Feb 27, 2018 at 1:12 PM, Nagy, Gábor <span dir="ltr"><<a href="mailto:gabor.nagy@balabit.com" target="_blank">gabor.nagy@balabit.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello!<br>
<br>
Just a guess, but have you tried dir_group, etc. options as well?<br>
<br>
Regards,<br>
Gabor<br>
<br>
On Tue, Feb 27, 2018 at 12:08 PM, Machiel Richards<br>
<div class="HOEnZb"><div class="h5"><<a href="mailto:machiel.richards@gmail.com">machiel.richards@gmail.com</a>> wrote:<br>
> Hi,<br>
><br>
>    I have added that and restarted syslog-ng, however still no difference.<br>
><br>
>    Still creates the directories and files with root as owner and group.<br>
><br>
> drwxrwx--- 3 root root 4.0K Feb 27 13:07<br>
><br>
> On Tue, Feb 27, 2018 at 1:05 PM, Dwijadas Dey <<a href="mailto:dwijad@gmail.com">dwijad@gmail.com</a>> wrote:<br>
>><br>
>> Add create_dirs (yes) in the options section.<br>
>><br>
>> On 27-Feb-2018 2:24 PM, "Machiel Richards" <<a href="mailto:machiel.richards@gmail.com">machiel.richards@gmail.com</a>><br>
>> wrote:<br>
>><br>
>> Good day guys<br>
>><br>
>>       I am having an issue that I seem not be able to resolve thus far.<br>
>><br>
>>       I am fairly new to syslog-ng and have setup a new syslog server.<br>
>><br>
>><br>
>>       We have managed to get most of our servers sending logs to the<br>
>> server without issues, however I am having trouble to get syslog-ng to<br>
>> create the directories and files with the correct ownership.<br>
>><br>
>>       We have a seperate user and group which it needs to create<br>
>> directories with, however it keeps on creating directories and files as root<br>
>> user.<br>
>><br>
>><br>
>> below is my current config :<br>
>><br>
>> # First, set some global options.<br>
>> options { chain_hostnames(off); flush_lines(0); use_dns(yes);<br>
>> use_fqdn(yes); owner("syslog"); group("syslog"); perm(0640); stats_freq(0);<br>
>> bad_hostname("^gconfd$"); log_fifo_size(10000); };<br>
>><br>
>> source inputs {<br>
>>        system();<br>
>>        internal();<br>
>>        unix-stream("/dev/log");<br>
>>        tcp(max_connections(50));<br>
>>        udp();<br>
>> };<br>
>><br>
>><br>
>> destination logpile {<br>
>><br>
>> file("/var/log/HOSTS/$HOST/$<wbr>YEAR/$MONTH/$FACILITY.$YEAR$<wbr>MONTH$DAY"<br>
>>            owner("syslog") group("syslog") perm(0660)<br>
>>            create_dirs(yes) dir_perm(0770)); };<br>
>><br>
>>         log { source(inputs); destination(logpile); };<br>
>><br>
>><br>
>><br>
>><br>
>><br>
>> Can someone please assist me as any help would be appreciated.<br>
>><br>
>> Regard<br>
>><br>
>> --<br>
>> I am a bomb technician...If you see me running, TRY TO KEEP UP!<br>
>><br>
>><br>
>> ______________________________<wbr>______________________________<wbr>__________________<br>
>> Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
>> Documentation:<br>
>> <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
>> FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>> ______________________________<wbr>______________________________<wbr>__________________<br>
>> Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
>> Documentation:<br>
>> <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
>> FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
>><br>
>><br>
><br>
><br>
><br>
> --<br>
> I am a bomb technician...If you see me running, TRY TO KEEP UP!<br>
><br>
> ______________________________<wbr>______________________________<wbr>__________________<br>
> Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
> Documentation:<br>
> <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
> FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
><br>
><br>
______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature">I am a bomb technician...If you see me running, TRY TO KEEP UP!</div>
</div>