<div dir="ltr">Hello,<div><br></div>From the debug logs it looks to me that you have not installed <b>syslog-ng-java</b>. Otherwise it should be listed such as:<br><br>"Registering candidate plugin; module='java', context='destination', name=java', preference='0'"<br><br>Do you have the above mentioned package installed ?<div><br></div><div>--</div><div>Kokan</div></div><br><div class="gmail_quote"><div dir="ltr">On Fri, Apr 6, 2018 at 3:16 PM André F. Grehs <<a href="mailto:andre.grehs@bitcom.psi.br">andre.grehs@bitcom.psi.br</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:arial,helvetica,sans-serif;font-size:12pt;color:#000000"><div><br></div><div>Hi Gabor, thank you for your support.</div><div><br></div><div>Below is the output:</div><div><br></div><div><div></div></div><div><div>[root@syslog conf.d]# /usr/sbin/syslog-ng -Fedv</div><div>Starting to read include file; filename='/etc/syslog-ng/scl.conf', depth='1'</div><div>Global value changed; define='scl-root', value='/usr/share/syslog-ng/include/scl'</div><div>Global value changed; define='include-path', value='/etc/syslog-ng:/usr/share/syslog-ng/include'</div><div>Starting to read include file; filename='/usr/share/syslog-ng/include/scl/system/plugin.conf', depth='2'</div><div>Module loaded and initialized successfully; module='system-source'</div><div>Finishing include; filename='/usr/share/syslog-ng/include/scl/system/plugin.conf', depth='2'</div><div>Starting to read include file; filename='/usr/share/syslog-ng/include/scl/pacct/plugin.conf', depth='2'</div><div>Reading path for candidate modules; path='//usr/lib64/syslog-ng'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='affile.so', module='affile'</div><div>Registering candidate plugin; module='affile', context='source', name='file', preference='0'</div><div>Registering candidate plugin; module='affile', context='source', name='pipe', preference='0'</div><div>Registering candidate plugin; module='affile', context='destination', name='file', preference='0'</div><div>Registering candidate plugin; module='affile', context='destination', name='pipe', preference='0'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='afprog.so', module='afprog'</div><div>Registering candidate plugin; module='afprog', context='source', name='program', preference='0'</div><div>Registering candidate plugin; module='afprog', context='destination', name='program', preference='0'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='afsocket-notls.so', module='afsocket-notls'</div><div>Registering candidate plugin; module='afsocket-notls', context='source', name='unix-stream', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='destination', name='unix-stream', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='source', name='unix-dgram', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='destination', name='unix-dgram', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='source', name='tcp', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='destination', name='tcp', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='source', name='tcp6', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='destination', name='tcp6', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='source', name='udp', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='destination', name='udp', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='source', name='udp6', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='destination', name='udp6', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='source', name='syslog', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='destination', name='syslog', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='source', name='network', preference='0'</div><div>Registering candidate plugin; module='afsocket-notls', context='destination', name='network', preference='0'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='afsocket-tls.so', module='afsocket-tls'</div><div>Registering candidate plugin; module='afsocket-tls', context='source', name='unix-stream', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='destination', name='unix-stream', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='source', name='unix-dgram', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='destination', name='unix-dgram', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='source', name='tcp', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='destination', name='tcp', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='source', name='tcp6', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='destination', name='tcp6', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='source', name='udp', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='destination', name='udp', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='source', name='udp6', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='destination', name='udp6', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='source', name='syslog', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='destination', name='syslog', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='source', name='network', preference='100'</div><div>Registering candidate plugin; module='afsocket-tls', context='destination', name='network', preference='100'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='afsocket.so', module='afsocket'</div><div>Registering candidate plugin; module='afsocket', context='source', name='unix-stream', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='destination', name='unix-stream', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='source', name='unix-dgram', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='destination', name='unix-dgram', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='source', name='tcp', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='destination', name='tcp', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='source', name='tcp6', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='destination', name='tcp6', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='source', name='udp', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='destination', name='udp', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='source', name='udp6', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='destination', name='udp6', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='source', name='syslog', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='destination', name='syslog', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='source', name='network', preference='100'</div><div>Registering candidate plugin; module='afsocket', context='destination', name='network', preference='100'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='afstomp.so', module='afstomp'</div><div>Registering candidate plugin; module='afstomp', context='destination', name='stomp', preference='0'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='afuser.so', module='afuser'</div><div>Registering candidate plugin; module='afuser', context='destination', name='usertty', preference='0'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='basicfuncs.so', module='basicfuncs'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='grep', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='if', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='echo', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='length', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='substr', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='strip', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='sanitize', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='lowercase', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='uppercase', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='replace-delimiter', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='+', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='-', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='*', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='/', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='%', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='ipv4-to-int', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='indent-multi-line', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='context-length', preference='0'</div><div>Registering candidate plugin; module='basicfuncs', context='template-func', name='env', preference='0'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='confgen.so', module='confgen'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='cryptofuncs.so', module='cryptofuncs'</div><div>Registering candidate plugin; module='cryptofuncs', context='template-func', name='uuid', preference='0'</div><div>Registering candidate plugin; module='cryptofuncs', context='template-func', name='hash', preference='0'</div><div>Registering candidate plugin; module='cryptofuncs', context='template-func', name='sha1', preference='0'</div><div>Registering candidate plugin; module='cryptofuncs', context='template-func', name='sha256', preference='0'</div><div>Registering candidate plugin; module='cryptofuncs', context='template-func', name='sha512', preference='0'</div><div>Registering candidate plugin; module='cryptofuncs', context='template-func', name='md4', preference='0'</div><div>Registering candidate plugin; module='cryptofuncs', context='template-func', name='md5', preference='0'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='csvparser.so', module='csvparser'</div><div>Registering candidate plugin; module='csvparser', context='parser', name='csv-parser', preference='0'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='dbparser.so', module='dbparser'</div><div>Registering candidate plugin; module='dbparser', context='parser', name='db-parser', preference='0'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='linux-kmsg-format.so', module='linux-kmsg-format'</div><div>Registering candidate plugin; module='linux-kmsg-format', context='format', name='linux-kmsg', preference='0'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='syslogformat.so', module='syslogformat'</div><div>Registering candidate plugin; module='syslogformat', context='format', name='syslog', preference='0'</div><div>Registering candidate plugin; module='syslogformat', context='parser', name='syslog-parser', preference='0'</div><div>Reading shared object for a candidate module; path='//usr/lib64/syslog-ng', fname='system-source.so', module='system-source'</div><div>Finishing include; filename='/usr/share/syslog-ng/include/scl/pacct/plugin.conf', depth='2'</div><div>Starting to read include file; filename='/usr/share/syslog-ng/include/scl/syslogconf/plugin.conf', depth='2'</div><div>Module loaded and initialized successfully; module='confgen'</div><div>Finishing include; filename='/usr/share/syslog-ng/include/scl/syslogconf/plugin.conf', depth='2'</div><div>Finishing include; filename='/etc/syslog-ng/scl.conf', depth='1'</div><div>Module loaded and initialized successfully; module='afsocket-tls'</div><div>Module loaded and initialized successfully; module='affile'</div><div>Finishing include; content='source confgen system', depth='1'</div><div>Module loaded and initialized successfully; module='afuser'</div><div>Adding include file; filename='/etc/syslog-ng/conf.d/es.conf'</div><div>Starting to read include file; filename='/etc/syslog-ng/conf.d/es.conf', depth='1'</div><div>Error parsing destination, destination plugin elasticsearch2 not found in /etc/syslog-ng/conf.d/es.conf at line 5, column 3:</div><div> included from /etc/syslog-ng/syslog-ng.conf line 68, column 1</div><div><br></div><div> elasticsearch2 (</div><div> ^^^^^^^^^^^^^^</div><div><br></div><div>syslog-ng documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a></div><div>mailing list: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a></div></div><div><br></div><div></div><br><hr id="m_-6783984827646893537zwchr"><div><b>De: </b>"Nagy, Gábor" <<a href="mailto:gabor.nagy@balabit.com" target="_blank">gabor.nagy@balabit.com</a>><br><b>Para: </b>"Syslog-ng users' and developers' mailing list" <<a href="mailto:syslog-ng@lists.balabit.hu" target="_blank">syslog-ng@lists.balabit.hu</a>><br><b>Enviadas: </b>Sexta-feira, 6 de abril de 2018 10:00:52<br><b>Assunto: </b>Re: [syslog-ng] Problem activating: Centos7 + Syslog-ng OSE + Elasticsearch + kibana<br></div></div></div><div><div style="font-family:arial,helvetica,sans-serif;font-size:12pt;color:#000000"><br><div><div dir="ltr">Hi Andre!<br><br>Can you start syslog-ng in forergound mode with debugging to find out what is the problem?<br>"/usr/sbin/syslog-ng -Fedv"<br><div>Regards,</div><div>Gabor</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Apr 6, 2018 at 1:29 PM, André Grehs <span dir="ltr"><<a href="mailto:andre.grehs@bitcom.psi.br" target="_blank">andre.grehs@bitcom.psi.br</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="PT-BR"><div class="m_-6783984827646893537m_-8923719952359828839WordSection1"><p class="MsoNormal"><span style="font-family:'Tahoma',sans-serif">Hi group!<u></u><u></u></span></p><p class="MsoNormal"><span style="font-family:'Tahoma',sans-serif"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-family:'Tahoma',sans-serif">I installed a fresh Centos 7 setup to use it in a initial log management Project.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-family:'Tahoma',sans-serif">I´m made the procedures described at thw wizard <a href="https://syslog-ng.com/blog/syslog-ng-and-elasticsearch-6-getting-started-on-rhelcentos/" target="_blank">https://syslog-ng.com/blog/syslog-ng-and-elasticsearch-6-getting-started-on-rhelcentos/</a><u></u><u></u></span></p><p class="MsoNormal"><span style="font-family:'Tahoma',sans-serif">All is fine, but at the moment of the creation of the es.conf file of this procedure, the syslog-ng service could not start anymore. If i remove the es.conf file, the syslog-ng service start normally.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-family:'Tahoma',sans-serif">Can you help me with this problem?<u></u><u></u></span></p><p class="MsoNormal"><span style="font-family:'Tahoma',sans-serif"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-family:'Tahoma',sans-serif">P.S: Sorry for my english<u></u><u></u></span></p><p class="MsoNormal"><span style="font-family:'Tahoma',sans-serif"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-family:'Tahoma',sans-serif">Best Regards!<u></u><u></u></span></p><p class="MsoNormal"><span style="font-family:'Tahoma',sans-serif"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-family:'Tahoma',sans-serif">Andre.</span><u></u><u></u></p></div></div><br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>
<br>______________________________________________________________________________<br>Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br></div></div></div>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>