February 2003 - syslog-ng - lists.balabit.hu

RE: [syslog-ng]1.5.26 and RedHat8
by Madziarczyk, Jonathan 11 Feb '03

11 Feb '03

Thanks! -----Original Message----- From: Nate Campi [mailto:nate@campin.net] Sent: Tuesday, February 11, 2003 9:12 AM To: syslog-ng(a)lists.balabit.hu Subject: Re: [syslog-ng]1.5.26 and RedHat8 On Mon, Feb 10, 2003 at 02:44:20PM -0600, Madziarczyk, Jonathan wrote: > I didn't come across anything like this while scouring the archives, but > maybe someone has some ideas. > > So I just installed 1.5.26 onto a fresh RH8 install and I'm trying to > use my previous init.d script (see below) that I got from an "old > school" post from Binder. I'm not a rocket scientist when it comes to > linux, but according to the man pages the latest NG is still looking for > the config file in /etc/syslog-ng/syslog-ng.conf. I'm getting the > following error message when I try to run my init.d file. > Starting syslog-ng: Cannot open configuration file > /usr/local/etc/syslog-ng/syslog-ng.conf for reading > Parse error reading configuration file, exiting. (line 1) > I don't see anything in the script that looks like it should point it to > the usr/local dir....... > > So what am I missing? Or is there just a newer copy of an init script > that I can mooch? You can: a) modify your init script to use the -f option to specify your config file location ("/usr/local/sbin/syslog-ng -f /etc/syslog-ng/syslog-ng.conf") b) symlink /etc/syslog-ng/syslog-ng.conf to /usr/local/etc/syslog-ng/syslog-ng.conf ("mkdir -p /usr/local/etc/syslog-ng && ln -s /etc/syslog-ng/syslog-ng.conf /usr/local/etc/syslog-ng/syslog-ng.conf") c) recompile syslog-ng to use /etc/syslog-ng/syslog-ng.conf as the config file ("./configure --sysconfdir=/etc" if I remember correctly). Any of the above should solve your problem. -- Nate Campi http://www.campin.net _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0

1.5.26 and RedHat8
by Madziarczyk, Jonathan 11 Feb '03

11 Feb '03

I didn't come across anything like this while scouring the archives, but maybe someone has some ideas. So I just installed 1.5.26 onto a fresh RH8 install and I'm trying to use my previous init.d script (see below) that I got from an "old school" post from Binder. I'm not a rocket scientist when it comes to linux, but according to the man pages the latest NG is still looking for the config file in /etc/syslog-ng/syslog-ng.conf. I'm getting the following error message when I try to run my init.d file. Starting syslog-ng: Cannot open configuration file /usr/local/etc/syslog-ng/syslog-ng.conf for reading Parse error reading configuration file, exiting. (line 1) I don't see anything in the script that looks like it should point it to the usr/local dir....... So what am I missing? Or is there just a newer copy of an init script that I can mooch? JM : ######################################################################## ######## # # Program: syslog-ng init script # # Description: # # This is an init script for syslog-ng on the Linux platform. # # It totally relies on the Redhat function library and works the same # way as other typical Redhat init scripts. # # # Platforms (tested): Linux (Redhat 6.1) # # # Author: Gregor Binder <gbinder(a)sysfive.com> # # Last Changed: October 10, 2000 # # Copyright (c) 2000 by sysfive.com GmbH, All rights reserved. # Modded as needed for aesthetic porpoises -JM ######################################################################## ######## ######################################################################## ######## # configuration # INIT_PROG="/usr/local/sbin/syslog-ng" # Full path to daemon INIT_OPTS="-v -p /var/log/syslog-ng.pid" # options passed to daemon PATH=/bin:/sbin:/usr/bin:/usr/local/sbin:/usr/sbin INIT_NAME=`basename "$INIT_PROG"` # Source Redhat function library. # . /etc/rc.d/init.d/functions # Source config if [ -f /etc/sysconfig/syslog ] ; then . /etc/sysconfig/syslog else KLOGD_OPTIONS="-2" fi # Uncomment this if you are on Redhat and think this is useful # #. /etc/sysconfig/network # #if [ ${NETWORKING} = "no" ] #then # exit 0 #fi RETVAL=0 umask 077 ulimit -c 0 # See how we were called. case "$1" in start) echo -n "Starting $INIT_NAME: " daemon --check $INIT_PROG "$INIT_PROG $INIT_OPTS" RETVAL=$? echo -n "Starting Kernel Logger and Syslog-ng v.1.4.12: " [ -x "/sbin/klogd" ] && daemon klogd $KLOGD_OPTIONS echo [ $RETVAL -eq 0 ] && touch "/var/lock/subsys/${INIT_NAME}" ;; stop) echo -n "Stopping $INIT_NAME: " killproc $INIT_PROG RETVAL=$? echo -n "Stopping Kernel Logger and Syslog-ng v.1.4.12: " [ -x "/sbin/klogd" ] && killproc klogd echo [ $RETVAL -eq 0 ] && rm -f "/var/lock/subsys/${INIT_NAME}" ;; status) status $INIT_PROG RETVAL=$? ;; restart|reload) $0 stop $0 start RETVAL=$? ;; *) echo "Usage: $0 {start|stop|status|restart|reload}" exit 1 esac exit $RETVAL

2 1

syslog-ng crash
by Elad Levy 10 Feb '03

10 Feb '03

Hello, I am using syslog-ng 1.4.17. I have a few clients writing to remote log server. whenever I disconnect the client, the server dies, and vice versa. I am using udp for log writing. maybe I miss some options configuration. Does anyone has any ideas ? Elad. -- http://fastmail.fm - Access your email from home and the web

1 0

Re: syslog-ng digest, Vol 1 #953 - 2 msgs
by Michaelian Ennis 10 Feb '03

10 Feb '03

Grahm, I am sorry but I don't think syslog-ng is the solution for your problem. Ian -- Michaelian Ennis <mennis(a)corvus.net> Corvus Technologies

1 0

转让市话通一台500元(还有300话费) 和CDMA一台750元请电:25384100咨询
by 30000emails=15$ 09 Feb '03

09 Feb '03

2 1

3000万个邮箱地址加群发软件150元一套,详情请电0755-26368636咨询
by 30000emails=15$ 08 Feb '03

08 Feb '03

1 0

PRIVATE
by GRAHAM MAKO 08 Feb '03

08 Feb '03

Good Day, With warm heart I offer my friendship and my greetings, and I hope this letter meets you in good health. It will be surprising to you to receive this proposal from me since you do not know me personally. However, I am sincerely seeking your confidence in this transaction, which I propose with my free mind and as a person of integrity. My name is Mr.Graham Mako, the first son of Zuma Mako,one of the most popular black farmers from Zimbabwe, murdered in the land dispute in my country. As led by my instinct, I decided to contact you through email, after searching for your contacts via the internet, as it is the only means I can contact anybody since I am cutting off ties with Zimbabwe for security and safety reasons. However,I apologize if this is not acceptable to you. The purpose of this letter is to seek your most needed assistance in a business venture with my family. Due to the the land and political problems in Zimbabwe, as a result of President Robert Mugabe's introduction of new Land Act Reform wholly affecting the rich white farmers and the few rich black farmers, and his desire to hold on to power for life, my father forsaw the danger that came into Zimbabwe. Before he was murdered, he withdrew all of our business foreign accounts in dollars and sold up our shares in major companies. We then went to Johannesburg, South Africa to deposit the sum of US$14.5 million (Fourteen million, Five Hundred thousand US dollars), in a private security and finance company. This money was deposited with this Private Security and finance company for safety and security reasons, and was to be used for the purchase of land, new machines and chemicals establishment of new farms in Botswana and Swaziland. President Mugabe's support for the violent zimbabwean war veterans and some lunatics in the society, led to the murder of my beloved father and other innocent lives. I was continually threatened to abandon my inheritance from my father after he was murdered. I resisted for a while, but when the danger became unbearable, and I survived two murder attempts, I fled Zimbabwe to South Africa where I was arrested and detained for eight(8 good month)in jail.I fled south Africa for The Netherlands with the help of the present prison command chief officer in Charge(P.C.C.O) I am currently staying in the Netherlands where I am seeking political asylum. In fact my decision to come here to seek asylum, is because the security and finance company from South Africa, has a branch here, and they have moved the deposit from their office in Johannesburg to the Netherlands. I need to transfer this money to an account and invest part of the money. Since the law of Netherlands prohibits a refugee (asylum seeker) to open any bank account or be involved in any financial transaction, this is why I am seeking a genuine and reliable partner, whose account this money can be transferred, hence this proposal to you.You have to understand that this decision taken by me entrusting my families future into your hands, as a result of the safe keeping of this money. If you accept to assist me, all I want you to do for me, is to assist with arrangements to claim the deposit from the security and finance company from their office here in The Netherlands, as it has now been transfered from Johannesburg, South Africa to their branch here. The company will be legally informed of your representation to my family. For your assistance, I have two options for you. Firstly you can choose to have 10% of the money for your assistance, and helping me open an account for the money to be deposited here, or you can go into partnership with me for the proper profitable investment of the money in your country. Whichever the option you want, please notify me in your reply. I have also set aside 1%($145,000,00) of this money for all kinds of expenses that come our way in the process of this transaction, and 4% ($580,000,00) for Charity donation. If you prefer to accept the 10% for assisting with opening an account, then 85%will be left in the account here for my family. Please, I want you to maintain the absolute secrecy for the purpose of this transaction. I look forward to your reply and co-operation, and I thank you in advance as I anticipate your co-operation. Thanks and God bless. Sincerely, Graham Mako.

1 0

Syslog into DB
by Max Clark 07 Feb '03

07 Feb '03

Hi all, I read an interesting article about dumping data from syslog-ng into a database. I was wondering... Specifically geared towards a sendmail style maillog... Are there any tools available to parse logs and report similar to the pflogsumm tool? Thanks in advance, Max -- "The number of UNIX installations has grown to 10, with more expected." Unix Programmer's Manual, 2nd Ed., June 12, 1972

1 0

File Sizes
by Jacob Steinberger 06 Feb '03

06 Feb '03

Forgive me if this is a simple question, but, can syslog-ng handle file rotation? I see there are options for the fifo sizes but no tuning for log rotation or file sizes. If this isnt currently available, can syslog-ng follow inode changes if the file it's writing to is changed/deleted? Thanks in advance, Jacob

2 1

OK to start syslog-ng from rc.local (without command line switches?)
by seberino＠spawar.navy.mil 06 Feb '03

06 Feb '03

Is there any danger in just starting /usr/local/sbin/syslog-ng from rc.local??? It will get started *later* than if I messed with startup scripts but then again... logging ain't really vital for kernel to run right??? Are there any vital switches or should I just do plain ol' /usr/local/sbin/syslog-ng & ?? Thanks, Chris -- _______________________________________ Dr. Christian Seberino SPAWAR Systems Center San Diego Code 2872 San Diego, CA 92152-6147 U.S.A. Phone: (619) 553-9973 Fax: Email: seberino(a)spawar.navy.mil _______________________________________

1 0