[2019-12-12T15:36:34.657099] Unable to detect fully qualified hostname for localhost, use_fqdn() will use the short hostname;
[2019-12-12T15:36:34.657693] Systemd is detected as the running init system;
[2019-12-12T15:36:34.658621] Starting to read include file; filename='/etc/syslog-ng/scl.conf', depth='1'
[2019-12-12T15:36:34.658888] Adding include file; filename='/usr/share/syslog-ng/include/scl/apache/apache.conf', depth='2'
[2019-12-12T15:36:34.658896] Adding include file; filename='/usr/share/syslog-ng/include/scl/cisco/plugin.conf', depth='2'
[2019-12-12T15:36:34.658900] Adding include file; filename='/usr/share/syslog-ng/include/scl/iptables/iptables.conf', depth='2'
[2019-12-12T15:36:34.658903] Adding include file; filename='/usr/share/syslog-ng/include/scl/loggly/loggly.conf', depth='2'
[2019-12-12T15:36:34.658906] Adding include file; filename='/usr/share/syslog-ng/include/scl/logmatic/logmatic.conf', depth='2'
[2019-12-12T15:36:34.658910] Adding include file; filename='/usr/share/syslog-ng/include/scl/mbox/mbox.conf', depth='2'
[2019-12-12T15:36:34.658913] Adding include file; filename='/usr/share/syslog-ng/include/scl/rewrite/cc-mask.conf', depth='2'
[2019-12-12T15:36:34.658916] Adding include file; filename='/usr/share/syslog-ng/include/scl/solaris/plugin.conf', depth='2'
[2019-12-12T15:36:34.658919] Adding include file; filename='/usr/share/syslog-ng/include/scl/sudo/sudo.conf', depth='2'
[2019-12-12T15:36:34.658923] Adding include file; filename='/usr/share/syslog-ng/include/scl/syslogconf/plugin.conf', depth='2'
[2019-12-12T15:36:34.658926] Adding include file; filename='/usr/share/syslog-ng/include/scl/system/plugin.conf', depth='2'
[2019-12-12T15:36:34.658929] Adding include file; filename='/usr/share/syslog-ng/include/scl/system/tty10.conf', depth='2'
[2019-12-12T15:36:34.658936] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/apache/apache.conf', depth='2'
[2019-12-12T15:36:34.661928] Registering candidate plugin; module='syslogformat', context='format', name='syslog'
[2019-12-12T15:36:34.661954] Registering candidate plugin; module='syslogformat', context='parser', name='syslog-parser'
[2019-12-12T15:36:34.661961] Registering candidate plugin; module='basicfuncs', context='template-func', name='grep'
[2019-12-12T15:36:34.661966] Registering candidate plugin; module='basicfuncs', context='template-func', name='if'
[2019-12-12T15:36:34.661971] Registering candidate plugin; module='basicfuncs', context='template-func', name='or'
[2019-12-12T15:36:34.661977] Registering candidate plugin; module='basicfuncs', context='template-func', name='context-lookup'
[2019-12-12T15:36:34.661982] Registering candidate plugin; module='basicfuncs', context='template-func', name='context-length'
[2019-12-12T15:36:34.661988] Registering candidate plugin; module='basicfuncs', context='template-func', name='context-values'
[2019-12-12T15:36:34.661993] Registering candidate plugin; module='basicfuncs', context='template-func', name='echo'
[2019-12-12T15:36:34.661998] Registering candidate plugin; module='basicfuncs', context='template-func', name='length'
[2019-12-12T15:36:34.662003] Registering candidate plugin; module='basicfuncs', context='template-func', name='substr'
[2019-12-12T15:36:34.662008] Registering candidate plugin; module='basicfuncs', context='template-func', name='strip'
[2019-12-12T15:36:34.662014] Registering candidate plugin; module='basicfuncs', context='template-func', name='sanitize'
[2019-12-12T15:36:34.662019] Registering candidate plugin; module='basicfuncs', context='template-func', name='lowercase'
[2019-12-12T15:36:34.662027] Registering candidate plugin; module='basicfuncs', context='template-func', name='uppercase'
[2019-12-12T15:36:34.662032] Registering candidate plugin; module='basicfuncs', context='template-func', name='replace-delimiter'
[2019-12-12T15:36:34.662037] Registering candidate plugin; module='basicfuncs', context='template-func', name='padding'
[2019-12-12T15:36:34.662042] Registering candidate plugin; module='basicfuncs', context='template-func', name='binary'
[2019-12-12T15:36:34.662058] Registering candidate plugin; module='basicfuncs', context='template-func', name='dirname'
[2019-12-12T15:36:34.662063] Registering candidate plugin; module='basicfuncs', context='template-func', name='basename'
[2019-12-12T15:36:34.662068] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-concat'
[2019-12-12T15:36:34.662075] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-head'
[2019-12-12T15:36:34.662080] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-nth'
[2019-12-12T15:36:34.662085] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-tail'
[2019-12-12T15:36:34.662090] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-slice'
[2019-12-12T15:36:34.662095] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-count'
[2019-12-12T15:36:34.662100] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-append'
[2019-12-12T15:36:34.662105] Registering candidate plugin; module='basicfuncs', context='template-func', name='+'
[2019-12-12T15:36:34.662111] Registering candidate plugin; module='basicfuncs', context='template-func', name='-'
[2019-12-12T15:36:34.662122] Registering candidate plugin; module='basicfuncs', context='template-func', name='*'
[2019-12-12T15:36:34.662128] Registering candidate plugin; module='basicfuncs', context='template-func', name='/'
[2019-12-12T15:36:34.662133] Registering candidate plugin; module='basicfuncs', context='template-func', name='%'
[2019-12-12T15:36:34.662139] Registering candidate plugin; module='basicfuncs', context='template-func', name='sum'
[2019-12-12T15:36:34.662144] Registering candidate plugin; module='basicfuncs', context='template-func', name='min'
[2019-12-12T15:36:34.662149] Registering candidate plugin; module='basicfuncs', context='template-func', name='max'
[2019-12-12T15:36:34.662153] Registering candidate plugin; module='basicfuncs', context='template-func', name='average'
[2019-12-12T15:36:34.662158] Registering candidate plugin; module='basicfuncs', context='template-func', name='ipv4-to-int'
[2019-12-12T15:36:34.662176] Registering candidate plugin; module='basicfuncs', context='template-func', name='indent-multi-line'
[2019-12-12T15:36:34.662182] Registering candidate plugin; module='basicfuncs', context='template-func', name='env'
[2019-12-12T15:36:34.662187] Registering candidate plugin; module='basicfuncs', context='template-func', name='template'
[2019-12-12T15:36:34.662192] Registering candidate plugin; module='affile', context='source', name='file'
[2019-12-12T15:36:34.662196] Registering candidate plugin; module='affile', context='source', name='pipe'
[2019-12-12T15:36:34.662200] Registering candidate plugin; module='affile', context='source', name='wildcard_file'
[2019-12-12T15:36:34.662204] Registering candidate plugin; module='affile', context='source', name='stdin'
[2019-12-12T15:36:34.662207] Registering candidate plugin; module='affile', context='destination', name='file'
[2019-12-12T15:36:34.662211] Registering candidate plugin; module='affile', context='destination', name='pipe'
[2019-12-12T15:36:34.662215] Registering candidate plugin; module='appmodel', context='root', name='application'
[2019-12-12T15:36:34.662219] Registering candidate plugin; module='appmodel', context='parser', name='app-parser'
[2019-12-12T15:36:34.662223] Registering candidate plugin; module='csvparser', context='parser', name='csv-parser'
[2019-12-12T15:36:34.662229] Registering candidate plugin; module='kvformat', context='parser', name='kv-parser'
[2019-12-12T15:36:34.662233] Registering candidate plugin; module='kvformat', context='parser', name='linux-audit-parser'
[2019-12-12T15:36:34.662237] Registering candidate plugin; module='kvformat', context='template-func', name='format-welf'
[2019-12-12T15:36:34.662240] Registering candidate plugin; module='afsocket', context='source', name='unix-stream'
[2019-12-12T15:36:34.662248] Registering candidate plugin; module='afsocket', context='destination', name='unix-stream'
[2019-12-12T15:36:34.662252] Registering candidate plugin; module='afsocket', context='source', name='unix-dgram'
[2019-12-12T15:36:34.662256] Registering candidate plugin; module='afsocket', context='destination', name='unix-dgram'
[2019-12-12T15:36:34.662267] Registering candidate plugin; module='afsocket', context='source', name='tcp'
[2019-12-12T15:36:34.662271] Registering candidate plugin; module='afsocket', context='destination', name='tcp'
[2019-12-12T15:36:34.662275] Registering candidate plugin; module='afsocket', context='source', name='tcp6'
[2019-12-12T15:36:34.662278] Registering candidate plugin; module='afsocket', context='destination', name='tcp6'
[2019-12-12T15:36:34.662282] Registering candidate plugin; module='afsocket', context='source', name='udp'
[2019-12-12T15:36:34.662286] Registering candidate plugin; module='afsocket', context='destination', name='udp'
[2019-12-12T15:36:34.662290] Registering candidate plugin; module='afsocket', context='source', name='udp6'
[2019-12-12T15:36:34.662293] Registering candidate plugin; module='afsocket', context='destination', name='udp6'
[2019-12-12T15:36:34.662297] Registering candidate plugin; module='afsocket', context='source', name='syslog'
[2019-12-12T15:36:34.662301] Registering candidate plugin; module='afsocket', context='destination', name='syslog'
[2019-12-12T15:36:34.662305] Registering candidate plugin; module='afsocket', context='source', name='network'
[2019-12-12T15:36:34.662308] Registering candidate plugin; module='afsocket', context='destination', name='network'
[2019-12-12T15:36:34.662312] Registering candidate plugin; module='afsocket', context='source', name='systemd-syslog'
[2019-12-12T15:36:34.662316] Registering candidate plugin; module='sdjournal', context='source', name='systemd-journal'
[2019-12-12T15:36:34.662320] Registering candidate plugin; module='afuser', context='destination', name='usertty'
[2019-12-12T15:36:34.662324] Registering candidate plugin; module='date', context='parser', name='date-parser'
[2019-12-12T15:36:34.662328] Registering candidate plugin; module='linux-kmsg-format', context='format', name='linux-kmsg'
[2019-12-12T15:36:34.662332] Registering candidate plugin; module='system-source', context='source', name='system'
[2019-12-12T15:36:34.662336] Registering candidate plugin; module='pseudofile', context='destination', name='pseudofile'
[2019-12-12T15:36:34.662340] Registering candidate plugin; module='dbparser', context='parser', name='db-parser'
[2019-12-12T15:36:34.662344] Registering candidate plugin; module='dbparser', context='parser', name='grouping-by'
[2019-12-12T15:36:34.662348] Registering candidate plugin; module='cef', context='template-func', name='format-cef-extension'
[2019-12-12T15:36:34.662352] Registering candidate plugin; module='disk-buffer', context='inner-dest', name='disk_buffer'
[2019-12-12T15:36:34.662356] Registering candidate plugin; module='cryptofuncs', context='template-func', name='uuid'
[2019-12-12T15:36:34.662364] Registering candidate plugin; module='cryptofuncs', context='template-func', name='hash'
[2019-12-12T15:36:34.662368] Registering candidate plugin; module='cryptofuncs', context='template-func', name='sha1'
[2019-12-12T15:36:34.662372] Registering candidate plugin; module='cryptofuncs', context='template-func', name='sha256'
[2019-12-12T15:36:34.662376] Registering candidate plugin; module='cryptofuncs', context='template-func', name='sha512'
[2019-12-12T15:36:34.662380] Registering candidate plugin; module='cryptofuncs', context='template-func', name='md4'
[2019-12-12T15:36:34.662384] Registering candidate plugin; module='cryptofuncs', context='template-func', name='md5'
[2019-12-12T15:36:34.662388] Registering candidate plugin; module='afprog', context='source', name='program'
[2019-12-12T15:36:34.662393] Registering candidate plugin; module='afprog', context='destination', name='program'
[2019-12-12T15:36:34.662483] Finishing include; filename='/usr/share/syslog-ng/include/scl/apache/apache.conf', depth='2'
[2019-12-12T15:36:34.662502] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/cisco/plugin.conf', depth='2'
[2019-12-12T15:36:34.662770] Module loaded and initialized successfully; module='appmodel'
[2019-12-12T15:36:34.662804] Finishing include; filename='/usr/share/syslog-ng/include/scl/cisco/plugin.conf', depth='2'
[2019-12-12T15:36:34.662813] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/iptables/iptables.conf', depth='2'
[2019-12-12T15:36:34.662881] Finishing include; filename='/usr/share/syslog-ng/include/scl/iptables/iptables.conf', depth='2'
[2019-12-12T15:36:34.662888] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/loggly/loggly.conf', depth='2'
[2019-12-12T15:36:34.662978] Finishing include; filename='/usr/share/syslog-ng/include/scl/loggly/loggly.conf', depth='2'
[2019-12-12T15:36:34.662986] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/logmatic/logmatic.conf', depth='2'
[2019-12-12T15:36:34.663329] Finishing include; filename='/usr/share/syslog-ng/include/scl/logmatic/logmatic.conf', depth='2'
[2019-12-12T15:36:34.663344] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/mbox/mbox.conf', depth='2'
[2019-12-12T15:36:34.663389] Finishing include; filename='/usr/share/syslog-ng/include/scl/mbox/mbox.conf', depth='2'
[2019-12-12T15:36:34.663396] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/rewrite/cc-mask.conf', depth='2'
[2019-12-12T15:36:34.663468] Global value changed; define='balabit.credit-card-regexp', value='(:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})'
[2019-12-12T15:36:34.663502] Finishing include; filename='/usr/share/syslog-ng/include/scl/rewrite/cc-mask.conf', depth='2'
[2019-12-12T15:36:34.663509] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/solaris/plugin.conf', depth='2'
[2019-12-12T15:36:34.663566] Finishing include; filename='/usr/share/syslog-ng/include/scl/solaris/plugin.conf', depth='2'
[2019-12-12T15:36:34.663574] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/sudo/sudo.conf', depth='2'
[2019-12-12T15:36:34.663646] Finishing include; filename='/usr/share/syslog-ng/include/scl/sudo/sudo.conf', depth='2'
[2019-12-12T15:36:34.663653] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/syslogconf/plugin.conf', depth='2'
[2019-12-12T15:36:34.663808] Module loaded and initialized successfully; module='confgen'
[2019-12-12T15:36:34.663817] Finishing include; filename='/usr/share/syslog-ng/include/scl/syslogconf/plugin.conf', depth='2'
[2019-12-12T15:36:34.663825] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/system/plugin.conf', depth='2'
[2019-12-12T15:36:34.663870] Finishing include; filename='/usr/share/syslog-ng/include/scl/system/plugin.conf', depth='2'
[2019-12-12T15:36:34.663877] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/system/tty10.conf', depth='2'
[2019-12-12T15:36:34.663892] Global value changed; define='tty10', value='/dev/tty10'
[2019-12-12T15:36:34.663898] Finishing include; filename='/usr/share/syslog-ng/include/scl/system/tty10.conf', depth='2'
[2019-12-12T15:36:34.663904] Finishing include; filename='/etc/syslog-ng/scl.conf', depth='1'
[2019-12-12T15:36:34.663922] Plugin module not found in 'module-path'; module-path='/usr/lib/syslog-ng/3.13', module='mod-java'
[2019-12-12T15:36:34.664534] Module loaded and initialized successfully; module='system-source'
[2019-12-12T15:36:34.664928] Module loaded and initialized successfully; module='sdjournal'
[2019-12-12T15:36:34.664991] Finishing include; content='parser generator app-parser', depth='2'
[2019-12-12T15:36:34.665169] Module loaded and initialized successfully; module='kvformat'
[2019-12-12T15:36:34.665185] Finishing include; content='parser generator iptables-parser', depth='3'
[2019-12-12T15:36:34.665337] Module loaded and initialized successfully; module='csvparser'
[2019-12-12T15:36:34.665820] Module loaded and initialized successfully; module='basicfuncs'
[2019-12-12T15:36:34.665968] Finishing include; content='parser generator sudo-parser', depth='3'
[2019-12-12T15:36:34.666001] Finishing include; content='parser generator app-parser', depth='2'
[2019-12-12T15:36:34.666029] Finishing include; content='source generator system', depth='1'
[2019-12-12T15:36:34.666171] Module loaded and initialized successfully; module='affile'
[2019-12-12T15:36:34.667284] Module loaded and initialized successfully; module='afuser'
Error parsing affile, Error compiling template, error=Unknown template function "format-json" in /etc/syslog-ng/syslog-ng.conf at line 161, column 36:

   file("/var/log/d.json" template("$(format-json --scope syslog)\n"));
                                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

syslog-ng documentation: https://www.balabit.com/support/documentation?product=syslog-ng-ose
contact: https://lists.balabit.hu/mailman/listinfo/syslog-ng