April 2002 - syslog-ng - lists.balabit.hu

unsubscribe
by Chris Brown 19 Apr '02

19 Apr '02

Unsubscribe chris(a)nbs.co.uk

1 0

filtering with regexp
by mar tin 19 Apr '02

19 Apr '02

Hello :) When cron runs, it sends the following lines Apr 18 16:50:01 martinII PAM_unix[26181]: (cron) session opened for user smmsp by (uid=0) Apr 18 16:50:01 martinII PAM_unix[26182]: (cron) session opened for user runa by (uid=0) Apr 18 16:50:01 martinII PAM_unix[26183]: (cron) session opened for user runa by (uid=0) Apr 18 16:50:02 martinII PAM_unix[26181]: (cron) session closed for user smmsp Apr 18 16:50:25 martinII PAM_unix[26183]: (cron) session closed for user runa Apr 18 16:50:27 martinII PAM_unix[26182]: (cron) session closed for user runa I want to filter those lines and send them to other files, so I did: filter f_cron2{match("(cron) session opened");}; log { source(src); filter(f_cron2); destination(cron);}; but it sends the lines to auth.log! what am I doing wrong? __________________________________________________ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://taxes.yahoo.com/

2 1

Macro $MSG and '\'
by Jerome Peducasse 18 Apr '02

18 Apr '02

Hello, When I use template("$DATE $HOST [$FACILITY.$LEVEL] $PROGRAM $MSG\n"), messages like: Apr 16 16:02:28 xml-indexer1.conso.fr.ke.echo/xml-indexer1-0-0.conso.fr.ke.echo /ke/bin/afp.kelight[29524]: failed to init index '/ke/data/afp/group_by' in enum echo::keret echo::XmlServer::start(const char *):XmlServer.cc:235 become Apr 16 16:17:27 xml-indexer1.conso.fr.ke.echo [local0.err] /ke/bin/afp.kelight /ke/bin/afp.kelight[9294]: failed to init index \'/ke/data/afp/group_by\' in enum echo::keret echo::XmlServer::start(const char *):XmlServer.cc:235 ('/ke/data/afp/group_by' become \'/ke/data/afp/group_by\') Bye. -- Jerome Peducasse

2 2

FW:
by Robert Berlinger 18 Apr '02

18 Apr '02

Hi, Getting the following error sporadically: Apr 18 10:24:41 logserver syslog-ng[27078]: Error accepting AF_UNIX connection, opened connections: 4294967295, max: 100 There certainly isn't that many open connections. Running 1.4.14 on Redhat 7.2. Any pointers would be appreciated.

1 0

Lost of facility/level
by Jerome Peducasse 18 Apr '02

18 Apr '02

Hi, I'm using syslog-ng 1.5.15 and sometimes (probably during message burst), messages lost their facility/level and are logged with user/notice. Message format becomes: Mar 29 11:35:50 w3search3 in void echo::AtlasClient::onRead(void *):AtlasClient.cc:427 <130>Mar 29 11:35:50 w3search[19816]: read Context failed on socket=3 in void echo::AtlasClient::onRead(void *):AtlasClient.cc:434 instead of: Mar 29 11:32:07 w3search3 w3search[19817]: read Context failed on socket=3 in void echo::AtlasClient::onRead(void *):AtlasClient.cc:434 General log_fifo_size is set to 1000 and is set to 10000 for appropriate filter of this message: destination d_applicatif { file("/ke/logs/ke.log" owner(test) group(test) log_fifo_size(10000) ); }; filter f_applicatif { facility(local0); }; log { source(s_sys); filter(f_applicatif); destination(d_applicatif); destination(d_loghost_applicatif); flags(final); }; Any Idea ? -- Jerome Peducasse

2 15

Problem compiling on Solaris 8 (sparc)
by dcntrnoc＠cmp.com 18 Apr '02

18 Apr '02

Hi all, I'm trying to compile syslog-ng version 1.5.16 with gcc version 3.0.3. Yes, libol 0.3.2 is installed. I am receiving the following error. Any help would be appreciated. . . . gcc -DHAVE_CONFIG_H -I. -I/usr/local/src/syslog-ng/syslog-ng-1.5.16/src -I. -g -O2 -Wall -I/usr/local/include/libol -D_GNU_SOURCE -c afstreams.c afstreams.c: In function `stream_read_callback': afstreams.c:148: too few arguments to function `make_log_info' make[3]: *** [afstreams.o] Error 1 make[3]: Leaving directory `/usr/local/src/syslog-ng/syslog-ng-1.5.16/src' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/local/src/syslog-ng/syslog-ng-1.5.16/src' make[1]: *** [all-recursive-am] Error 2 make[1]: Leaving directory `/usr/local/src/syslog-ng/syslog-ng-1.5.16/src' make: *** [all-recursive] Error 1 Thanks in advance, Sharon. __________________________________________________________________________________________ Any views or opinions are solely those of the author and do not necessarily represent those of CMP Media. The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. If you are not the intended recipient of this message please do not read, copy, use or disclose this communication and notify the sender immediately. It should be noted that any review, retransmission, dissemination or other use of, or taking action or reliance upon, this information by persons or entities other than the intended recipient is prohibited. __________________________________________________________________________________________

3 2

RE: [syslog-ng]Installation Error
by Tom Horan 17 Apr '02

17 Apr '02

Did you get libol and installed that first ? It should be on the download page along with syslog-ng. ./thos -----Original Message----- From: Kaan Saldiraner [mailto:kaans@steltor.com] Sent: 17 April 2002 15:19 To: syslog-ng(a)lists.balabit.hu Cc: kaans(a)steltor.com Subject: [syslog-ng]Installation Error Hello Everyone, I just tried to compile syslog-ng on a mandrake 8.2 machine and at make i get these errors.. What do you think? Thanks --------------------------- [root@superfly syslog-ng-1.4.14]# make Making all in src make[1]: Entering directory `/tmp/syslog-ng-1.4.14/src' make all-recursive make[2]: Entering directory `/tmp/syslog-ng-1.4.14/src' Making all in . make[3]: Entering directory `/tmp/syslog-ng-1.4.14/src' gcc -DHAVE_CONFIG_H -I. -I/tmp/syslog-ng-1.4.14/src -I. -O2 -Wall -I/usr /include/libol -D_GNU_SOURCE -c main.c In file included from main.c:26: syslog-ng.h:31:21: objects.h: No such file or directory In file included from cfgfile.h:29, from main.c:27: sources.h:30:23: read_line.h: No such file or directory In file included from sources.h:32, from cfgfile.h:29, from main.c:27: log.h:30:16: io.h: No such file or directory In file included from cfgfile.h:29, from main.c:27: sources.h:33:18: list.h: No such file or directory main.c:29:20: format.h: No such file or directory main.c:30:20: werror.h: No such file or directory main.c:31:19: queue.h: No such file or directory make[3]: *** [main.o] Error 1 make[3]: Leaving directory `/tmp/syslog-ng-1.4.14/src' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/tmp/syslog-ng-1.4.14/src' make[1]: *** [all-recursive-am] Error 2 make[1]: Leaving directory `/tmp/syslog-ng-1.4.14/src' make: *** [all-recursive] Error 1 Kaan Saldiraner Steltor Inc. (514)733-8500 x6503 www.steltor.com _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng ************************************************************************ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. http://www.esatbusiness.com Subscribe to the Esat Business Online Magazine: http://www.esatbusiness.com/news/subscribe.asp Subscribe to REALISE - the online magazine from BT Ignite: http://www.btignite.com/realise ************************************************************************

1 0

Installation Error
by Kaan Saldiraner 17 Apr '02

17 Apr '02

Hello Everyone, I just tried to compile syslog-ng on a mandrake 8.2 machine and at make i get these errors.. What do you think? Thanks --------------------------- [root@superfly syslog-ng-1.4.14]# make Making all in src make[1]: Entering directory `/tmp/syslog-ng-1.4.14/src' make all-recursive make[2]: Entering directory `/tmp/syslog-ng-1.4.14/src' Making all in . make[3]: Entering directory `/tmp/syslog-ng-1.4.14/src' gcc -DHAVE_CONFIG_H -I. -I/tmp/syslog-ng-1.4.14/src -I. -O2 -Wall -I/usr /include/libol -D_GNU_SOURCE -c main.c In file included from main.c:26: syslog-ng.h:31:21: objects.h: No such file or directory In file included from cfgfile.h:29, from main.c:27: sources.h:30:23: read_line.h: No such file or directory In file included from sources.h:32, from cfgfile.h:29, from main.c:27: log.h:30:16: io.h: No such file or directory In file included from cfgfile.h:29, from main.c:27: sources.h:33:18: list.h: No such file or directory main.c:29:20: format.h: No such file or directory main.c:30:20: werror.h: No such file or directory main.c:31:19: queue.h: No such file or directory make[3]: *** [main.o] Error 1 make[3]: Leaving directory `/tmp/syslog-ng-1.4.14/src' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/tmp/syslog-ng-1.4.14/src' make[1]: *** [all-recursive-am] Error 2 make[1]: Leaving directory `/tmp/syslog-ng-1.4.14/src' make: *** [all-recursive] Error 1 Kaan Saldiraner Steltor Inc. (514)733-8500 x6503 www.steltor.com

1 0

[PATCH] make log_msg_size tunable
by Balazs Scheidler 17 Apr '02

17 Apr '02

Hi, The attached patch makes the maximum length of a log message tunable as a global option. Testers welcome. Usage: options { log_msg_size(8192); }; -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1

1 1

chain_hostnames and template
by Jerome Peducasse 16 Apr '02

16 Apr '02

Hello, How can I use template and keep chain_hostname in log format ? In documentation, I don't see macro allows it. Thx. -- Jerome Peducasse

2 1