December 2001 - syslog-ng - lists.balabit.hu

no logging after HUP (1.5.13)
by Arnold Pulleman 05 Jan '02

05 Jan '02

Because of the template feature I want to use syslog-ng 1.5 on a FreeBSD 4.2 and 4.3 platform. While testing 1.5.13 I found a problem when sending a hangup signal to syslog-ng. The restart message is shown but nothing follows until syslog-ng is stopped and started again. My question is how to solve this problem? The following output of the messages file appeared: Oct 30 11:06:49 humble syslog-ng[5018]: syslog-ng version 1.5.13 starting Oct 30 11:08:56 humble su: BAD SU user to root on /dev/ttyp7 Oct 30 11:09:28 humble su: user to root on /dev/ttyp7 Oct 30 11:16:49 humble syslog-ng[5018]: STATS: dropped 0 Oct 30 11:25:09 humble su: BAD SU user to root on /dev/ttyp7 Oct 30 11:26:05 humble su: user to root on /dev/ttyp3 Oct 30 11:26:49 humble syslog-ng[5018]: STATS: dropped 0 Oct 30 11:27:00 humble syslog-ng[5018]: SIGHUP received, restarting syslog-ng Oct 30 11:35:36 humble syslog-ng[5109]: syslog-ng version 1.5.13 starting Oct 30 11:35:49 humble syslog-ng[5109]: SIGHUP received, restarting syslog-ng

4 6

help
by Nocentino, Anthony 02 Jan '02

02 Jan '02

how do i config syslog-ng to start up automatically on boot

2 1

problems with file template directive
by Nathan Rawling 02 Jan '02

02 Jan '02

I'm attempted to use the template() option to specify the file format for a file destination, and I keep getting the error: parse error at 12 ...which isn't too helpful. Here is my syslog-ng.conf file: > > log { source(src); destination(all); }; > > source src { > udp(); > tcp(); > sun-streams("/dev/log" door("/etc/.syslog_door")); > internal(); > }; > > destination all { > file("/var/log/template" template("$FACILITY $PRIORITY $ISODATE $FULLHOST $PROGRAM $MESSAGE")); > file("/var/log/messages"); > }; Can anybody tell me what I'm doing wrong? I tried looking at the source code to figure out what was wrong, but I don't have any experience with yacc. Also, it would be useful if the template() directive could be used with the program() or pipe() destinations for what I'm working on. Perhaps I'll try and dig through the code to see how hard it would be to add that. Thanks in advance! Nathan

2 1

hospital
by Balazs Scheidler 01 Jan '02

01 Jan '02

Hi, As you might have noticed, I'm quite unresponsive these days. The reason for this is I was in hospital, and I have to go back this afternoon. I expect to be there for at least a week. I'll try to answer all messages as soon as I return. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1

6 11

AW: [syslog-ng]What are the installation requirements???
by Sippel, Christian 29 Dec '01

29 Dec '01

Hi, as far as I understand your error messages flex and bison are missing. You have to install them if you have not done it yet. This is a quotation from the "install"-file of syslog-ng: Compiling the program: ====================== syslog-ng requires gcc as a C compiler (at least version 2.7.2), GNU flex as a lex, and bison as a parser generator. Some GNU C and GNU flex extensions are used, porting to other compilers/lex/yacc combination is welcome. Hope this helps, regards, Christian > ---------- > Von: Krishna[SMTP:krishna_shekhar@gmx.net] > Antwort an: syslog-ng(a)lists.balabit.hu > Gesendet: Freitag, 28. Dezember 2001 09:19 > An: syslog-ng(a)lists.balabit.hu > Betreff: Re: [syslog-ng]What are the installation requirements??? > > Hi, > These were the error's > loading cache ./config.cache checking for a BSD compatible install... > /usr/bin/install -c checking whether build environment is sane... yes > checking whether make sets ${MAKE}... yes checking for working aclocal... > missing checking for working autoconf... missing checking for working > automake... missing checking for working autoheader... missing checking > for > working makeinfo... missing checking whether build environment is sane... > yes checking for gcc... gcc checking whether the C compiler (gcc ) > works... > yes checking whether the C compiler (gcc ) is a cross-compiler... no > checking whether we are using GNU C... yes checking whether gcc > accepts -g... yes checking for gcc option to accept ANSI C... none needed > checking for bison... no checking for byacc... no checking how to run the > C > preprocessor... gcc -E > checking for flex... no > checking for lex... no > checking for flex... lex > checking for yywrap in -ll... no > checking lex output file root... > > Where should I get these package? I found an rpm for syslog-ng But the rpm > did not work because it said > it requires <= 3 soimething like that!! > > regards > Krishna Shekhar > Network Administrator > Wiplash.com > ----- Original Message ----- > From: "Ohrberg, Mick" <Mick.Ohrberg(a)umb.com> > To: <syslog-ng(a)lists.balabit.hu> > Sent: Thursday, December 27, 2001 7:38 PM > Subject: RE: [syslog-ng]What are the installation requirements??? > > > > Krishna, > > > > What were the errors? Did you get them during compilation, installation > or > > when trying to run syslog-ng? > > > > /Mick > > > > -----Original Message----- > > From: Krishna [mailto:krishna_shekhar@gmx.net] > > Sent: Saturday, December 22, 2001 4:37 AM > > To: Syslog-ng > > Subject: [syslog-ng]What are the installation requirements??? > > > > > > Hi, > > I am new to syslog-ng. I wanted to know what are the installation > > reqirements for this package to install.I tried to install it but got > lot > of > > error's. > > Please Help > > > > regards > > Krishna Shekhar > > Network Administrator > > Wiplash.com > > > > > > _______________________________________________ > > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > > https://lists.balabit.hu/mailman/listinfo/syslog-ng > > > > > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/syslog-ng >

3 3

verion info
by Matthew Schumacher 28 Dec '01

28 Dec '01

Hello, What is the version difference between the 1.4 and 1.5 versions of syslog-ng. Is the odd number denote a beta branch. Thanks, schu -- ______________________________________________________________________ Matthew Schumacher matt.s(a)aptalaska.net Alaska Power and Telephone desk: 907-563-2199 x223 Systems Administrator cell: 907-240-2275

1 0

RE: [syslog-ng]What are the installation requirements???
by Ohrberg, Mick 28 Dec '01

28 Dec '01

Krishna, What were the errors? Did you get them during compilation, installation or when trying to run syslog-ng? /Mick -----Original Message----- From: Krishna [mailto:krishna_shekhar@gmx.net] Sent: Saturday, December 22, 2001 4:37 AM To: Syslog-ng Subject: [syslog-ng]What are the installation requirements??? Hi, I am new to syslog-ng. I wanted to know what are the installation reqirements for this package to install.I tried to install it but got lot of error's. Please Help regards Krishna Shekhar Network Administrator Wiplash.com

2 1

pings from loghost
by Sippel, Christian 27 Dec '01

27 Dec '01

Dear list, I have set up a loghost using syslog-ng 1.4.14 on an AIX-Box. Now there is the phenomenon that the loghost tries to send ICMP echo requests (= pings) to machines from which it is receiving logs. Those pings are blocked by a firewall which is located between the loghost and the other computers. How can I stop the syslog-ng-machine from sending these pings? They are obviously not necessary for the proper work of syslog-ng as the loghost works very well even when the pings are blocked. Thanks in advance, regards, Christian

3 2

one thing could better (i think so)
by Lukasz Wojtow 27 Dec '01

27 Dec '01

Hi! Syslog-n is great, but I have one suggestion what could be better: when new configuration starts and there is an error in config file, syslog writes to log message like: "Syntax error reading config file, using old configuration". Yea... but where is this error? I have configured syslog-ng with few hundreds lines and i haved an error somewhere :/ Couldn't syslog write a line number where an error occured? Best regards, Lukasz Wojtow ps. an error was "filteer" instead "filter" :)

2 2

Kellemes �nnepeket!
by info＠delton.hu 24 Dec '01

24 Dec '01

Kellemes Karácsonyi Ünnepeket és Eredményekben Gazdag, Boldog Új Évet Kívánunk! DELTON www.delton.hu

1 0