November 2003 - syslog-ng - lists.balabit.hu

RE: [syslog-ng]syslog-ng 1.6.0rc4 build problems
by David Aldrich 26 Nov '03

26 Nov '03

Hi José > A couple of months ago I placed online SRPMS > of libol and syslog-ng. They build without problems > in Red Hat 7.3, 8.0, and 9.0. The configuration > file included is similar to the one RH includes > with Syslog. > > http://gsd.di.uminho.pt/jpo/software/RPMS/ Thank you for this information. David

1 0

RE: [syslog-ng]syslog-ng 1.6.0rc4 build problems
by David Aldrich 26 Nov '03

26 Nov '03

Hi Andrew Thank you very much for your reply. I will give it a try. David > -----Original Message----- > From: Hamilton Andrew [mailto:Andrew.Hamilton@afccc.af.mil] > Sent: Wednesday, November 26, 2003 2:39 PM > To: syslog-ng(a)lists.balabit.hu > Subject: RE: [syslog-ng]syslog-ng 1.6.0rc4 build problems > > > #set up your source: > > source net { udp(); } # default port all interfaces > #or > source net { udp(ip("10.10.10.10") port(514)); };# specific > interface and specific port > > #any sort of filter or none: > > filter f_local7 { facility(local7); }; > > #a destination > > destination d_net { file("/var/log/netmessages" perm(644)); > }; # perm is an option, you can leave it off. #or > destination d_macro_net { > file("/var/log/net/$HOST/$YEAR/$MONTH/$DAY/$FACILITY.log" > create_dirs(yes) perm(600)); } #macros > > #and a log line > > log { source(net); destination(d_macro_net); }; # everything > from the port is logged to the macro determined file log { > source(net); filter(f_local7); destination(d_net); }; # only > local7 messages logged > > That shows you a couple of different options as well as some > defaults. This really just scratches the surface of what > syslog-ng is capable of... > > -----Original Message----- > From: David Aldrich [mailto:david.aldrich@t-modus.nec.co.uk] > Sent: Wednesday, November 26, 2003 9:22 AM > To: 'syslog-ng(a)lists.balabit.hu' > Subject: RE: [syslog-ng]syslog-ng 1.6.0rc4 build problems > > > Hi > > > I in no way meant to sound condescending and apologize if it > > came across that way. It was interesting as I was trying to > > imagine situations in which that could happen to you, thus > > trying to help. > > Thanks for your help - I wasn't offended at all! > > I want to experiment with syslog-ng's ability to log messages > received on the UDP port. For now, I want to continue to use > syslogd to log all other messages - so as not to disturb the > system. Please could you or anyone else briefly explain how > to make a simple .conf file to log UDP messages with syslog-ng? > > David > > > Telecom MODUS is an ISO9001/TickIT approved Company. > LRQA Certificate of Approval reference 0965133 > ************************************************************ > THIS MESSAGE IS INTENDED ONLY FOR THE USE OF THE INDIVIDUAL > TO WHOM IT IS ADDRESSED AND CONTAINS INFORMATION THAT IS > PRIVATE AND/OR PROPRIETARY. If the reader of this message is > not the intended recipient, or the employee or agent > responsible for delivering the message to the intended > recipient, you are hereby notified that any dissemination, > distribution or copying of this communication is strictly > prohibited. If you have received this communication in error, > please forward the whole message to admin(a)t-modus.nec.co.uk > Company Registration No.3493954 Telephone Number +44 (0) 1372 > 381880 Fax Number +44 (0) 1372 381804 Email general(a)t-modus.nec.co.uk > ************************************************************ > > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/sysl> og-ng > > Frequently asked questions at > http://www.campin.net/syslog-ng/faq.html > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/sysl> og-ng > > Frequently asked questions at > http://www.campin.net/syslog-ng/faq.html >

2 1

RE: [syslog-ng]syslog-ng 1.6.0rc4 build problems
by Hamilton Andrew 26 Nov '03

26 Nov '03

#set up your source: source net { udp(); } # default port all interfaces #or source net { udp(ip("10.10.10.10") port(514)); };# specific interface and specific port #any sort of filter or none: filter f_local7 { facility(local7); }; #a destination destination d_net { file("/var/log/netmessages" perm(644)); }; # perm is an option, you can leave it off. #or destination d_macro_net { file("/var/log/net/$HOST/$YEAR/$MONTH/$DAY/$FACILITY.log" create_dirs(yes) perm(600)); } #macros #and a log line log { source(net); destination(d_macro_net); }; # everything from the port is logged to the macro determined file log { source(net); filter(f_local7); destination(d_net); }; # only local7 messages logged That shows you a couple of different options as well as some defaults. This really just scratches the surface of what syslog-ng is capable of... -----Original Message----- From: David Aldrich [mailto:david.aldrich@t-modus.nec.co.uk] Sent: Wednesday, November 26, 2003 9:22 AM To: 'syslog-ng(a)lists.balabit.hu' Subject: RE: [syslog-ng]syslog-ng 1.6.0rc4 build problems Hi > I in no way meant to sound condescending and apologize if it > came across that way. It was interesting as I was trying to > imagine situations in which that could happen to you, thus > trying to help. Thanks for your help - I wasn't offended at all! I want to experiment with syslog-ng's ability to log messages received on the UDP port. For now, I want to continue to use syslogd to log all other messages - so as not to disturb the system. Please could you or anyone else briefly explain how to make a simple .conf file to log UDP messages with syslog-ng? David Telecom MODUS is an ISO9001/TickIT approved Company. LRQA Certificate of Approval reference 0965133 ************************************************************ THIS MESSAGE IS INTENDED ONLY FOR THE USE OF THE INDIVIDUAL TO WHOM IT IS ADDRESSED AND CONTAINS INFORMATION THAT IS PRIVATE AND/OR PROPRIETARY. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please forward the whole message to admin(a)t-modus.nec.co.uk Company Registration No.3493954 Telephone Number +44 (0) 1372 381880 Fax Number +44 (0) 1372 381804 Email general(a)t-modus.nec.co.uk ************************************************************ _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0

compiling syslog-ng on AIX...
by Aaron Botsis 26 Nov '03

26 Nov '03

I'm having quite a significant amount of trouble compiling syslog-ng on aix. I'm using aix 5.1ML3 with gnupro toolchain. Normally, I wouldn't ask such a silly question on a mailing list, but I'm getting quite strange compiler errors such as: main.c: In function `setup_signals': main.c:122: `SA_ONESHOT' undeclared (first use in this function) main.c:122: (Each undeclared identifier is reported only once which leads me to believe nobody has ever attempted a port, yet I'm seeing mailing list entries that suggest otherwise (from like 2002) -- can anyone offer some tips on what toolchain (xlc, gnu, etc) they used, and which version of the supporting libraries were used also? tia! Aaron

1 1

RE: [syslog-ng]syslog-ng 1.6.0rc4 build problems
by David Aldrich 26 Nov '03

26 Nov '03

Hi > I in no way meant to sound condescending and apologize if it > came across that way. It was interesting as I was trying to > imagine situations in which that could happen to you, thus > trying to help. Thanks for your help - I wasn't offended at all! I want to experiment with syslog-ng's ability to log messages received on the UDP port. For now, I want to continue to use syslogd to log all other messages - so as not to disturb the system. Please could you or anyone else briefly explain how to make a simple .conf file to log UDP messages with syslog-ng? David Telecom MODUS is an ISO9001/TickIT approved Company. LRQA Certificate of Approval reference 0965133 ************************************************************ THIS MESSAGE IS INTENDED ONLY FOR THE USE OF THE INDIVIDUAL TO WHOM IT IS ADDRESSED AND CONTAINS INFORMATION THAT IS PRIVATE AND/OR PROPRIETARY. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please forward the whole message to admin(a)t-modus.nec.co.uk Company Registration No.3493954 Telephone Number +44 (0) 1372 381880 Fax Number +44 (0) 1372 381804 Email general(a)t-modus.nec.co.uk ************************************************************

1 0

RE: [syslog-ng]syslog-ng 1.6.0rc4 build problems
by Hamilton Andrew 26 Nov '03

26 Nov '03

You can actually build libol in your home directory and pass --with-libol=~/libol-0.3.xx and not have to install it. Welcome to Linux... I in no way meant to sound condescending and apologize if it came across that way. It was interesting as I was trying to imagine situations in which that could happen to you, thus trying to help. Drew -----Original Message----- From: David Aldrich [mailto:david.aldrich@t-modus.nec.co.uk] Sent: Wednesday, November 26, 2003 9:10 AM To: 'syslog-ng(a)lists.balabit.hu' Subject: RE: [syslog-ng]syslog-ng 1.6.0rc4 build problems Hi > Interesting, I've never had to build it as root on my RH > Linux boxes. I had to install it as root but that is to be > expected... Ok, I think the point is that it is necessary to install libol as root before building syslog-ng. I am quite new to Linux and followed the syslog-ng instruction: ./configure && make && make install explicity. i.e. I did it all on one line, as root. Sorry, if I missed the obvious. David Telecom MODUS is an ISO9001/TickIT approved Company. LRQA Certificate of Approval reference 0965133 ************************************************************ THIS MESSAGE IS INTENDED ONLY FOR THE USE OF THE INDIVIDUAL TO WHOM IT IS ADDRESSED AND CONTAINS INFORMATION THAT IS PRIVATE AND/OR PROPRIETARY. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please forward the whole message to admin(a)t-modus.nec.co.uk Company Registration No.3493954 Telephone Number +44 (0) 1372 381880 Fax Number +44 (0) 1372 381804 Email general(a)t-modus.nec.co.uk ************************************************************ _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0

RE: [syslog-ng]syslog-ng 1.6.0rc4 build problems
by David Aldrich 26 Nov '03

26 Nov '03

Hi > Interesting, I've never had to build it as root on my RH > Linux boxes. I had to install it as root but that is to be > expected... Ok, I think the point is that it is necessary to install libol as root before building syslog-ng. I am quite new to Linux and followed the syslog-ng instruction: ./configure && make && make install explicity. i.e. I did it all on one line, as root. Sorry, if I missed the obvious. David Telecom MODUS is an ISO9001/TickIT approved Company. LRQA Certificate of Approval reference 0965133 ************************************************************ THIS MESSAGE IS INTENDED ONLY FOR THE USE OF THE INDIVIDUAL TO WHOM IT IS ADDRESSED AND CONTAINS INFORMATION THAT IS PRIVATE AND/OR PROPRIETARY. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please forward the whole message to admin(a)t-modus.nec.co.uk Company Registration No.3493954 Telephone Number +44 (0) 1372 381880 Fax Number +44 (0) 1372 381804 Email general(a)t-modus.nec.co.uk ************************************************************

1 0

RE: [syslog-ng]problem with syslog-ng
by Hamilton Andrew 26 Nov '03

26 Nov '03

try configuring with --enable-sun-streams --enable-sun-door and see if that helps. It usually detects it but I guess for some reason it didn't on your machine. -----Original Message----- From: Suchun Wu [mailto:swu@isc.bmo.com] Sent: Monday, September 08, 2003 5:11 PM To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng]problem with syslog-ng I'm trying to use syslog-ng-1.6.0rc3 on Solaris8. The compilation and installation passed. But when I run the start-up script, I got the following: sun-door support is not compiled in, door=/etc/.syslog_door Error initializing configuration, exiting. Any help is appreciated Suchun

1 0

RE: [syslog-ng]syslog-ng 1.6.0rc4 build problems
by Hamilton Andrew 26 Nov '03

26 Nov '03

Interesting, I've never had to build it as root on my RH Linux boxes. I had to install it as root but that is to be expected... -----Original Message----- From: David Aldrich [mailto:david.aldrich@t-modus.nec.co.uk] Sent: Wednesday, November 26, 2003 4:45 AM To: 'syslog-ng(a)lists.balabit.hu' Subject: RE: [syslog-ng]syslog-ng 1.6.0rc4 build problems Hi I have now built syslog-ng 1.6.0rc4 successfully. The key was to build it as root. Perhaps this should be made clear in the installation procedure? Best wishes David Telecom MODUS is an ISO9001/TickIT approved Company. LRQA Certificate of Approval reference 0965133 ************************************************************ THIS MESSAGE IS INTENDED ONLY FOR THE USE OF THE INDIVIDUAL TO WHOM IT IS ADDRESSED AND CONTAINS INFORMATION THAT IS PRIVATE AND/OR PROPRIETARY. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please forward the whole message to admin(a)t-modus.nec.co.uk Company Registration No.3493954 Telephone Number +44 (0) 1372 381880 Fax Number +44 (0) 1372 381804 Email general(a)t-modus.nec.co.uk ************************************************************ _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0

/dev/log is not a socket error on startup
by Tony Karakashian 26 Nov '03

26 Nov '03

Howdy. Doing some updates to my Linux box today when I noticed I still hadn't gotten around to setting up log rotation. It was then that I've noticed syslog-ng wasn't running. I tried to start it manually, but get the following: io.c: bind_unix_socket(): /dev/log not a socket Error initializing configuration, exiting. I just upgraded to latest libol (0.3.11) and syslog-ng (1.6.rc4) today, same results. Any ideas? Thanks -T

2 2