<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mv="http://macVmlSchemaUri" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:Calibri;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Calibri;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:Calibri;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Im trying to use the wildcard-file module, but the syslog-ng Module: wildcard-file is missing<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"># service syslog-ng start<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Error parsing source, source plugin wildcard-file not found in /etc/syslog-ng/conf.d/export-client.conf at line 4, column 29:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> included from /etc/syslog-ng/syslog-ng.conf line 71, column 1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">source s_export_recursive { wildcard-file(<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> ^^^^^^^^^^^^^<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I upgraded to the latest syslog-ng
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"># syslog-ng -V<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">syslog-ng 3.9.1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Installer-Version: 3.9.1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Revision: <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Module-Directory: //usr/lib64/syslog-ng<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Module-Path: //usr/lib64/syslog-ng<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Available-Modules: kvformat,afprog,afsocket,basicfuncs,linux-kmsg-format,graphite,cef,curl,add-contextual-data,date,json-plugin,pseudofile,afstomp,dbparser,confgen,cryptofuncs,syslogformat,disk-buffer,afuser,afamqp,csvparser,affile,system-source<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Enable-Debug: off<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Enable-GProf: off<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Enable-Memtrace: off<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Enable-IPv6: on<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Enable-Spoof-Source: off<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Enable-TCP-Wrapper: on<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Enable-Linux-Caps: on<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">But I still don’t see where the wildcard-file is.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt">What Im missing to enable the wildcard-file module?<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">The conf file Ive created where I want to use it looks like this:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"># syslog-ng conf file for central logging CLIENT: export<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">#<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"># export source<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">source s_export_recursive { wildcard-file(<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> base-dir("/var/www/capstan/shared/log/exports/")<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> filename-pattern("*.log")<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> recursive(yes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> follow-freq(1)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> flags(no-parse)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> log-fetch-limit(100)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> ); };<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"># export destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">destination d_export_app1 { tcp(10.0.32.97 port(601)); };<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"># export log<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">log { source(s_export_recursive); destination(d_export_app1); };<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-family:"Times New Roman"">Eric Anderson</span></b><span style="font-family:"Times New Roman""> | DevOps Engineer<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-family:"Times New Roman"">E: <a href="mailto:michaelg@stonecroptech.com">
<span style="color:#0563C1">eric.anderson@stonecroptech.com</span></a> | O: 212.500.2017 | M: 650.743.4598<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-family:"Times New Roman""><img border="0" width="145" height="46" id="_x0000_i1025" src="cid:image001.png@01D3D1B1.4BE3C030"></span><o:p></o:p></p>
</div>
</body>
</html>