<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Hi,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Could you run syslog-ng with -Fedtv flags and share the output?</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Best regards,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Attila</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Debananda Pal <debananda.pal@gmail.com><br>
<b>Sent:</b> Wednesday, September 25, 2019 4:55 PM<br>
<b>To:</b> syslog-ng@lists.balabit.hu <syslog-ng@lists.balabit.hu><br>
<b>Subject:</b> [syslog-ng] Help needed in configuration file upgrade (from syslog-ng-3.11.1 to syslog-ng-3.23.1)</font>
<div> </div>
</div>
<div>
<div style="background-color:#FFEB9C; width:100%; border-style:solid; border-color:#9C6500; border-width:1pt; padding:2pt; font-size:10pt; line-height:12pt; font-family:'Calibri'; color:Black; text-align:left">
<span style="color:#9C6500; font-weight:bold">CAUTION:</span> This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.</div>
<br>
<div>
<div dir="ltr">
<div class="x_gmail_quote">
<div dir="ltr">Hi All,
<div><br>
</div>
<div>Sorry to send the mail to all as I am not aware about individual email id.</div>
<div><br>
</div>
<div>I am trying to upgrade syslog-ng from 3.11.1 to 3.23.1 on Linux and finding some issues as below.</div>
<div>I have changed few parameters like version, include, but at present getting error with file() configuration.</div>
<div>-------------------------------------------------------------------------------------</div>
<div>~ # /sbin/syslog-ng -f /tandberg/persistent/syslog-ng.conf -p /var/run/syslog-ng.pid<br>
[2019-09-25T13:40:11.707232] WARNING: Your configuration file uses an obsoleted keyword, please update your configuration; key<br>
word='flush_timeout', change='Some drivers support batch-timeout() instead that you can specify at the destination level.', lo<br>
cation='#buffer:15:5'<br>
<b>Error parsing source statement, source plugin file not found in /tandberg/persistent/syslog-ng.conf:31:5-31:9:</b><br>
26<br>
27 # Sources<br>
28<br>
29 source s_everything {<br>
30 internal();<br>
31----> file("/proc/kmsg" log_fetch_limit(100) log_iw_size(100));<br>
31----> ^^^^<br>
32 unix_dgram("/var/log/log" log_fetch_limit(100) log_iw_size(100));<br>
33 udp(ip(127.0.0.1) port(514) log_fetch_limit(100) log_iw_size(100));<br>
34 };<br>
35<br>
36 # Destinations<br>
<br>
syslog-ng documentation: <a href="https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%3Fproduct%3Dsyslog-ng-ose&data=02%7C01%7Cattila.szakacs%40oneidentity.com%7Cd2c903a2e4a4413f453808d741c87af4%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637050201639994233&sdata=zD%2FNYgPCUXIsuA79b5dkALKVfc%2BVS1AFGtdqJgykemI%3D&reserved=0" originalsrc="https://www.balabit.com/support/documentation?product=syslog-ng-ose" shash="ZDODw3RHlVctzpgZ3mkrS9Y8nhChw9nuuA5OTHiMUgrRqaUPfX1VJ73uPas4rJEE41bBkjh2KBDS/ZrfubKGiYVdnjYazq7IuSE0PZMypgAHl5ILiEQg/LzyH04BG+mhTJKTsOQ66yGLaFAMgYF1gImhJYN9+q+wPn/IkMlu8pc=" target="_blank">
https://www.balabit.com/support/documentation?product=syslog-ng-ose</a><br>
contact: <a href="https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=02%7C01%7Cattila.szakacs%40oneidentity.com%7Cd2c903a2e4a4413f453808d741c87af4%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637050201640004226&sdata=i7oD1DjUEEBoEV7rhAZMjzcOgjH%2BhMJ5uBO%2BgVYe2o8%3D&reserved=0" originalsrc="https://lists.balabit.hu/mailman/listinfo/syslog-ng" shash="GUil85firllyx2IJk9cjm0KTL4QAWblLNsAhf36hpjfFFy1SlhLWYDGqrxyfgK1vcHHB/2vWHEqMWHuNm7FEZOGwYLJlPQfqfzICjFwqnkaO1jcS0Y9ft+hqboE0JOoiIyU+QPOG7jCEAUmcl4RHPUVFYkSZxVFqyjrvSLGdAoM=" target="_blank">
https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
~ #<br>
</div>
<div>------------------------------------------------------------------------------------- <br>
</div>
<div><br>
</div>
<div>I have attached the syslog-ng.conf file for your kind perusal.</div>
<div>Please give your suggestion on the modified config file.</div>
<div><br>
</div>
<div>Regards,</div>
<div>D Pal</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>