<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Calibri" size="2"><span style="font-size:11pt;">
<div>Dear all,</div>
<div> </div>
<div> I am a newbie for syslog-ng <font face="Wingdings">J</font>, could you please help me to figure out my issues with syslog-ng.conf ?</div>
<div> </div>
<div>After modified syslog-ng.conf by adding more source, destination and filter, try to restart syslog-ng by /etc/init.d/syslog-ng restart</div>
<div> </div>
<div>Got the following error</div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">*********************************************</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;"># <font size="2" color="black"><span style="font-size:9pt;"><b>/etc/init.d/syslog-ng restart</b></span></font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Restarting syslog-ng (via systemctl): Job for syslog-ng.service failed because the control process exited with error code. See "systemctl status syslog-ng.service" and "journalctl -xe" for details.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">[FAILED]</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;"> </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">****************************************</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;"># <font size="2" color="black"><span style="font-size:9pt;"><b>systemctl status syslog-ng.service</b></span></font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">â— syslog-ng.service - LSB: start and stop syslog-NG daemon</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;"> Loaded: loaded (/etc/rc.d/init.d/syslog-ng; <font color="#C45911">bad; vendor preset: enabled</font>)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;"> Active: <font color="#C45911">failed</font> (Result: exit-code) since Tue 2019-02-26 15:17:04 EST; 30s ago</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;"> Docs: man:systemd-sysv-generator(8)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;"> Process: 53303 ExecStop=/etc/rc.d/init.d/syslog-ng stop (code=exited, status=0/SUCCESS)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;"> Process: 292500 ExecReload=/etc/rc.d/init.d/syslog-ng reload (code=exited, status=0/SUCCESS)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;"> Process: 53320 ExecStart=/etc/rc.d/init.d/syslog-ng start (code=exited, status=1/FAILURE)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;"> Main PID: 116276</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;"> </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083451] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083503] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083554] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.250946] <font color="#C45911">Error checking the uniqueness of the persist names, please override it with persist-name op...conf:131:9'</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.250984] <font color="#C45911">Error checking the uniqueness of the persist names, please override it with persist-name op...conf:132:9'</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [<font color="#C45911">FAILED</font>]</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com systemd[1]: syslog-ng.service: control process exited, code=exited status=1</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com systemd[1]: <font color="#C45911">Failed to start LSB</font>: start and stop syslog-NG daemon.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com systemd[1]: <font color="#C45911">Unit syslog-ng.service entered failed state.</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com systemd[1]: <font color="#C45911">syslog-ng.service failed.</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Hint: Some lines were ellipsized, use -l to show in full.</span></font></div>
<div><font face="Times New Roman" color="#00B0F0"> </font></div>
<div><font face="Times New Roman" color="#00B0F0"> </font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;"># <font size="2" color="black"><span style="font-size:9pt;"><b>journalctl -xe</b></span></font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:05:28 ABCD.com puppet-agent[48945]: Could not send report: getaddrinfo: No address associated with hostname</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:09:40 ABCD.com sshd[51578]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=m3vrb434.rbc1.royalbank.com user=VL51</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:09:40 ABCD.com sshd[51578]: Accepted password for VL51 from 10.94.201.168 port 62031 ssh2</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:10:02 ABCD.com crond[51740]: pam_unix(crond:account): password for user root will expire in 8 days</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:10:02 ABCD.com crond[51741]: pam_unix(crond:account): password for user root will expire in 8 days</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:10:02 ABCD.com crond[51740]: pam_unix(crond:session): session opened for user root by (uid=0)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:10:02 ABCD.com crond[51741]: pam_unix(crond:session): session opened for user root by (uid=0)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:10:02 ABCD.com CROND[51743]: (root) CMD (/usr/lib64/sa/sa1 1 1)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:10:02 ABCD.com CROND[51742]: (root) CMD (/bin/printf '\n***********************************************************************************\n\n For filesize:' >> /app/</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:10:02 ABCD.com CROND[51740]: pam_unix(crond:session): session closed for user root</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:10:02 ABCD.com sendmail[51759]: x1QKA2Bw051759: from=root, size=1598, class=-60, nrcpts=1, msgid=<<a href="mailto:201902262010.x1QKA2Bw051759@ABCD.com"><font color="#0563C1"><u>201902262010.x1QKA2Bw051759@ABCD.com</u></font></a>>,
relay=root@localho</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:10:02 ABCD.com sendmail[51759]: x1QKA2Bw051759: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=139598, relay=[127.0.0.1] [127.0.0.1], </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:10:02 ABCD.com CROND[51741]: pam_unix(crond:session): session closed for user root</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:10:50 ABCD.com sudo[51905]: VL51 : TTY=pts/0 ; PWD=/app/syslog-ng/custom/conf ; USER=root ; COMMAND=/usr/bin/su -</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:10:50 ABCD.com su[51909]: (to root) VL51 on pts/0</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:10:50 ABCD.com su[51909]: pam_unix(su-l:session): session opened for user root by VL51(uid=0)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:15:01 ABCD.com crond[52764]: pam_unix(crond:account): password for user root will expire in 8 days</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:15:01 ABCD.com crond[52764]: pam_unix(crond:session): session opened for user root by (uid=0)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:15:01 ABCD.com CROND[52765]: (root) CMD (/usr/sbin/logrotate /app/syslog-ng/custom/conf/syslog-ng-rotate.conf)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:15:01 ABCD.com CROND[52764]: pam_unix(crond:session): session closed for user root</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:02 ABCD.com polkitd[1117]: Registered Authentication Agent for unix-process:53295:2185270730 (system bus name :1.268 [/usr/bin/pkttyagent --notify-fd 5 --fallback],</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:02 ABCD.com systemd[1]: Stopping LSB: start and stop syslog-NG daemon...</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- Subject: Unit syslog-ng.service has begun shutting down</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- Defined-By: systemd</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- Support: <a href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel"><font color="#0563C1"><u>http://lists.freedesktop.org/mailman/listinfo/systemd-devel</u></font></a></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- Unit syslog-ng.service has begun shutting down.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:02 ABCD.com supervise/syslog-ng[116275]: Daemon exited gracefully, not restarting; exitcode='0'</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:03 ABCD.com syslog-ng[53303]: Stopping syslog-ng: [ OK ]</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:03 ABCD.com systemd[1]: Starting LSB: start and stop syslog-NG daemon...</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- Subject: Unit syslog-ng.service has begun start-up</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- Defined-By: systemd</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- Support: <a href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel"><font color="#0563C1"><u>http://lists.freedesktop.org/mailman/listinfo/systemd-devel</u></font></a></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- Unit syslog-ng.service has begun starting up.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: Starting syslog-ng: [2019-02-26T15:17:04.082875] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083333] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083396] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083451] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083503] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083554] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.250946] <font color="#C45911">Error checking the uniqueness of the persist names, please override it with persist-name option. Shutting</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.250984] <font color="#C45911">Error checking the uniqueness of the persist names, please override it with persist-name option. Shutting</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [<font color="#C45911">FAILED</font>]</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com systemd[1]: syslog-ng.service: control process exited, code=exited status=1</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com systemd[1]: Failed to start LSB: start and stop syslog-NG daemon.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- Subject: Unit syslog-ng.service has failed</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- Defined-By: systemd</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- Support: <a href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel"><font color="#0563C1"><u>http://lists.freedesktop.org/mailman/listinfo/systemd-devel</u></font></a></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- Unit syslog-ng.service has failed.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">-- The result is failed.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com systemd[1]: <font color="#C45911">Unit syslog-ng.service entered failed state.</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com systemd[1]: <font color="#C45911">syslog-ng.service failed.</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:17:04 ABCD.com polkitd[1117]: <font color="#C45911">Unregistered Authentication Agent for unix-process:53295:2185270730 (system bus name :1.268, object path /org/freedesktop/PolicyKit1/Auth</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:20:01 ABCD.com crond[53909]: pam_unix(crond:account): password for user root will expire in 8 days</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:20:01 ABCD.com crond[53908]: pam_unix(crond:account): password for user root will expire in 8 days</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:20:01 ABCD.com crond[53909]: pam_unix(crond:session): session opened for user root by (uid=0)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:20:01 ABCD.com crond[53908]: pam_unix(crond:session): session opened for user root by (uid=0)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:20:01 ABCD.com CROND[53910]: (root) CMD (/usr/lib64/sa/sa1 1 1)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:20:01 ABCD.com CROND[53911]: (root) CMD (/bin/printf '\n***********************************************************************************\n\n For filesize:' >> /app/</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:20:01 ABCD.com CROND[53908]: pam_unix(crond:session): session closed for user root</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:20:01 ABCD.com sendmail[53926]: x1QKK1vA053926: from=root, size=1805, class=-60, nrcpts=1, msgid=<<a href="mailto:201902262020.x1QKK1vA053926@ABCD.com"><font color="#0563C1"><u>201902262020.x1QKK1vA053926@ABCD.com</u></font></a>>,
relay=root@localho</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:20:01 ABCD.com sendmail[53926]: x1QKK1vA053926: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=139805, relay=[127.0.0.1] [127.0.0.1], </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt;">Feb 26 15:20:01 ABCD.com CROND[53909]: pam_unix(crond:session): session closed for user root</span></font></div>
<div><font face="Times New Roman"> </font></div>
<div><font face="Times New Roman"> </font></div>
<div>Thank you very much for your expertize and instruction!!!!!</div>
<div> </div>
<div><font face="Arial" size="2" color="#1F4E79"><span style="font-size:10pt;"><b>VL</b></span></font></div>
<div><font face="Times New Roman"> </font></div>
<div><font face="Times New Roman"> </font></div>
<div><font face="Times New Roman"> </font></div>
<div><font face="Times New Roman"> </font></div>
<div><font face="Times New Roman"> </font></div>
</span></font>
<P><font style="FONT-SIZE: 9pt">_______________________________________________________________________</font></P>
<P><font style="FONT-SIZE: 9pt">If you received this email in error, please advise the sender (by return email or otherwise) immediately. You have consented to receive the attached electronically at the above-noted email address; please retain a copy of this confirmation for future reference.</font></P>
<P><font style="FONT-SIZE: 9pt">Si vous recevez ce courriel par erreur, veuillez en aviser l'expéditeur immédiatement, par retour de courriel ou par un autre moyen. Vous avez accepté de recevoir le(s) document(s) ci-joint(s) par voie électronique à l'adresse courriel indiquée ci-dessus; veuillez conserver une copie de cette confirmation pour les fins de reference future. </font></P>
<P></P></body>
</html>