<div dir="ltr"><div dir="ltr"><div dir="ltr">Hello,<div><br></div><div>In order to point out the exact location of issue, you have to share your configuration.</div><div><br></div><div>If you do not want to share it, there is two hint to find it yourself:</div><div><br></div><div>1) The message "<span style="color:rgb(196,89,17);font-family:Calibri;font-size:10.6667px">Error checking the uniqueness of the persist names, please override it with persist-name option. Shutting" </span>actually truncated (possible by journalctl), and the full version should contain the location of the item that has conflicting persist-name.</div><div><br></div><div>2) About persist-name, syslog-ng uses a persist file to store some information (for example to keep data between restart/reload). Date is stored in that file via its key, those keys are generated based on the configuration item options (for file source it could be the path of the file, etc...), sometimes it could collide with other configured item and syslog-ng cannot resolve the name collition; but the user could with specifying the *persist-name* option, which override the default generated option.</div><div><br></div><div>An example:</div><div>source s {</div><div> file("/tmp/file" persist-name("my-tmp-file") );</div><div>};</div><div><br></div><div><br></div><div>--</div><div>Kokan</div></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Feb 26, 2019 at 9:57 PM Lin, Victor <<a href="mailto:victor.lin@rbc.com">victor.lin@rbc.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<font face="Calibri" size="2"><span style="font-size:11pt">
<div>Dear all,</div>
<div> </div>
<div> I am a newbie for syslog-ng <font face="Wingdings">J</font>, could you please help me to figure out my issues with syslog-ng.conf ?</div>
<div> </div>
<div>After modified syslog-ng.conf by adding more source, destination and filter, try to restart syslog-ng by /etc/init.d/syslog-ng restart</div>
<div> </div>
<div>Got the following error</div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">*********************************************</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt"># <font size="2" color="black"><span style="font-size:9pt"><b>/etc/init.d/syslog-ng restart</b></span></font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Restarting syslog-ng (via systemctl): Job for syslog-ng.service failed because the control process exited with error code. See "systemctl status syslog-ng.service" and "journalctl -xe" for details.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">[FAILED]</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt"> </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">****************************************</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt"># <font size="2" color="black"><span style="font-size:9pt"><b>systemctl status syslog-ng.service</b></span></font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">â— syslog-ng.service - LSB: start and stop syslog-NG daemon</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt"> Loaded: loaded (/etc/rc.d/init.d/syslog-ng; <font color="#C45911">bad; vendor preset: enabled</font>)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt"> Active: <font color="#C45911">failed</font> (Result: exit-code) since Tue 2019-02-26 15:17:04 EST; 30s ago</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt"> Docs: man:systemd-sysv-generator(8)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt"> Process: 53303 ExecStop=/etc/rc.d/init.d/syslog-ng stop (code=exited, status=0/SUCCESS)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt"> Process: 292500 ExecReload=/etc/rc.d/init.d/syslog-ng reload (code=exited, status=0/SUCCESS)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt"> Process: 53320 ExecStart=/etc/rc.d/init.d/syslog-ng start (code=exited, status=1/FAILURE)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt"> Main PID: 116276</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt"> </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083451] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083503] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083554] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.250946] <font color="#C45911">Error checking the uniqueness of the persist names, please override it with persist-name op...conf:131:9'</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.250984] <font color="#C45911">Error checking the uniqueness of the persist names, please override it with persist-name op...conf:132:9'</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [<font color="#C45911">FAILED</font>]</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com systemd[1]: syslog-ng.service: control process exited, code=exited status=1</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com systemd[1]: <font color="#C45911">Failed to start LSB</font>: start and stop syslog-NG daemon.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com systemd[1]: <font color="#C45911">Unit syslog-ng.service entered failed state.</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com systemd[1]: <font color="#C45911">syslog-ng.service failed.</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Hint: Some lines were ellipsized, use -l to show in full.</span></font></div>
<div><font face="Times New Roman" color="#00B0F0"> </font></div>
<div><font face="Times New Roman" color="#00B0F0"> </font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt"># <font size="2" color="black"><span style="font-size:9pt"><b>journalctl -xe</b></span></font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:05:28 ABCD.com puppet-agent[48945]: Could not send report: getaddrinfo: No address associated with hostname</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:09:40 ABCD.com sshd[51578]: pam_sss(sshd:auth): authentication success; logname= uid=0 euid=0 tty=ssh ruser= rhost=<a href="http://m3vrb434.rbc1.royalbank.com" target="_blank">m3vrb434.rbc1.royalbank.com</a> user=VL51</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:09:40 ABCD.com sshd[51578]: Accepted password for VL51 from 10.94.201.168 port 62031 ssh2</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:10:02 ABCD.com crond[51740]: pam_unix(crond:account): password for user root will expire in 8 days</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:10:02 ABCD.com crond[51741]: pam_unix(crond:account): password for user root will expire in 8 days</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:10:02 ABCD.com crond[51740]: pam_unix(crond:session): session opened for user root by (uid=0)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:10:02 ABCD.com crond[51741]: pam_unix(crond:session): session opened for user root by (uid=0)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:10:02 ABCD.com CROND[51743]: (root) CMD (/usr/lib64/sa/sa1 1 1)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:10:02 ABCD.com CROND[51742]: (root) CMD (/bin/printf '\n***********************************************************************************\n\n For filesize:' >> /app/</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:10:02 ABCD.com CROND[51740]: pam_unix(crond:session): session closed for user root</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:10:02 ABCD.com sendmail[51759]: x1QKA2Bw051759: from=root, size=1598, class=-60, nrcpts=1, msgid=<<a href="mailto:201902262010.x1QKA2Bw051759@ABCD.com" target="_blank"><font color="#0563C1"><u>201902262010.x1QKA2Bw051759@ABCD.com</u></font></a>>,
relay=root@localho</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:10:02 ABCD.com sendmail[51759]: x1QKA2Bw051759: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=139598, relay=[127.0.0.1] [127.0.0.1], </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:10:02 ABCD.com CROND[51741]: pam_unix(crond:session): session closed for user root</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:10:50 ABCD.com sudo[51905]: VL51 : TTY=pts/0 ; PWD=/app/syslog-ng/custom/conf ; USER=root ; COMMAND=/usr/bin/su -</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:10:50 ABCD.com su[51909]: (to root) VL51 on pts/0</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:10:50 ABCD.com su[51909]: pam_unix(su-l:session): session opened for user root by VL51(uid=0)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:15:01 ABCD.com crond[52764]: pam_unix(crond:account): password for user root will expire in 8 days</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:15:01 ABCD.com crond[52764]: pam_unix(crond:session): session opened for user root by (uid=0)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:15:01 ABCD.com CROND[52765]: (root) CMD (/usr/sbin/logrotate /app/syslog-ng/custom/conf/syslog-ng-rotate.conf)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:15:01 ABCD.com CROND[52764]: pam_unix(crond:session): session closed for user root</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:02 ABCD.com polkitd[1117]: Registered Authentication Agent for unix-process:53295:2185270730 (system bus name :1.268 [/usr/bin/pkttyagent --notify-fd 5 --fallback],</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:02 ABCD.com systemd[1]: Stopping LSB: start and stop syslog-NG daemon...</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- Subject: Unit syslog-ng.service has begun shutting down</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- Defined-By: systemd</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- Support: <a href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel" target="_blank"><font color="#0563C1"><u>http://lists.freedesktop.org/mailman/listinfo/systemd-devel</u></font></a></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- Unit syslog-ng.service has begun shutting down.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:02 ABCD.com supervise/syslog-ng[116275]: Daemon exited gracefully, not restarting; exitcode='0'</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:03 ABCD.com syslog-ng[53303]: Stopping syslog-ng: [ OK ]</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:03 ABCD.com systemd[1]: Starting LSB: start and stop syslog-NG daemon...</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- Subject: Unit syslog-ng.service has begun start-up</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- Defined-By: systemd</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- Support: <a href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel" target="_blank"><font color="#0563C1"><u>http://lists.freedesktop.org/mailman/listinfo/systemd-devel</u></font></a></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- Unit syslog-ng.service has begun starting up.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: Starting syslog-ng: [2019-02-26T15:17:04.082875] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083333] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083396] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083451] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083503] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.083554] WARNING: With use-dns(no), dns-cache() will be forced to 'no' too!;</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.250946] <font color="#C45911">Error checking the uniqueness of the persist names, please override it with persist-name option. Shutting</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [2019-02-26T15:17:04.250984] <font color="#C45911">Error checking the uniqueness of the persist names, please override it with persist-name option. Shutting</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com syslog-ng[53320]: [<font color="#C45911">FAILED</font>]</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com systemd[1]: syslog-ng.service: control process exited, code=exited status=1</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com systemd[1]: Failed to start LSB: start and stop syslog-NG daemon.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- Subject: Unit syslog-ng.service has failed</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- Defined-By: systemd</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- Support: <a href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel" target="_blank"><font color="#0563C1"><u>http://lists.freedesktop.org/mailman/listinfo/systemd-devel</u></font></a></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- Unit syslog-ng.service has failed.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">-- The result is failed.</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com systemd[1]: <font color="#C45911">Unit syslog-ng.service entered failed state.</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com systemd[1]: <font color="#C45911">syslog-ng.service failed.</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:17:04 ABCD.com polkitd[1117]: <font color="#C45911">Unregistered Authentication Agent for unix-process:53295:2185270730 (system bus name :1.268, object path /org/freedesktop/PolicyKit1/Auth</font></span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:20:01 ABCD.com crond[53909]: pam_unix(crond:account): password for user root will expire in 8 days</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:20:01 ABCD.com crond[53908]: pam_unix(crond:account): password for user root will expire in 8 days</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:20:01 ABCD.com crond[53909]: pam_unix(crond:session): session opened for user root by (uid=0)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:20:01 ABCD.com crond[53908]: pam_unix(crond:session): session opened for user root by (uid=0)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:20:01 ABCD.com CROND[53910]: (root) CMD (/usr/lib64/sa/sa1 1 1)</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:20:01 ABCD.com CROND[53911]: (root) CMD (/bin/printf '\n***********************************************************************************\n\n For filesize:' >> /app/</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:20:01 ABCD.com CROND[53908]: pam_unix(crond:session): session closed for user root</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:20:01 ABCD.com sendmail[53926]: x1QKK1vA053926: from=root, size=1805, class=-60, nrcpts=1, msgid=<<a href="mailto:201902262020.x1QKK1vA053926@ABCD.com" target="_blank"><font color="#0563C1"><u>201902262020.x1QKK1vA053926@ABCD.com</u></font></a>>,
relay=root@localho</span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:20:01 ABCD.com sendmail[53926]: x1QKK1vA053926: to=root, ctladdr=root (0/0), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=139805, relay=[127.0.0.1] [127.0.0.1], </span></font></div>
<div><font size="1" color="#00B0F0"><span style="font-size:8pt">Feb 26 15:20:01 ABCD.com CROND[53909]: pam_unix(crond:session): session closed for user root</span></font></div>
<div><font face="Times New Roman"> </font></div>
<div><font face="Times New Roman"> </font></div>
<div>Thank you very much for your expertize and instruction!!!!!</div>
<div> </div>
<div><font face="Arial" size="2" color="#1F4E79"><span style="font-size:10pt"><b>VL</b></span></font></div>
<div><font face="Times New Roman"> </font></div>
<div><font face="Times New Roman"> </font></div>
<div><font face="Times New Roman"> </font></div>
<div><font face="Times New Roman"> </font></div>
<div><font face="Times New Roman"> </font></div>
</span></font>
<p><font style="font-size:9pt">_______________________________________________________________________</font></p>
<p><font style="font-size:9pt">If you received this email in error, please advise the sender (by return email or otherwise) immediately. You have consented to receive the attached electronically at the above-noted email address; please retain a copy of this confirmation for future reference.</font></p>
<p><font style="font-size:9pt">Si vous recevez ce courriel par erreur, veuillez en aviser l'expéditeur immédiatement, par retour de courriel ou par un autre moyen. Vous avez accepté de recevoir le(s) document(s) ci-joint(s) par voie électronique à l'adresse courriel indiquée ci-dessus; veuillez conserver une copie de cette confirmation pour les fins de reference future. </font></p>
<p></p></div>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>