February 2016 - syslog-ng - lists.balabit.hu

Cross Compiling syslog-ng 3.7.2 on power-pc architecture
by Girish Kumar 23 Feb '16

23 Feb '16

Hi All, I am successful in configure and make . All compilation is successful. "Make install "is giving following problem. Could you please help me on this Is there any workaround for this? /bin/mkdir -p '/home/gkuma020/PERFORCE/7.X.X.R01-gkuma020-gg/engr/sw/tps/built/46/7.X.X.R01/ppc_common/lib/syslog-ng' /bin/sh ./libtool --mode=install /usr/bin/install -c modules/syslogformat/libsyslogformat.la modules/afsocket/libafsocket.la modules/affile/libaffile.la modules/afprog/libafprog.la modules/afuser/libafuser.la modules/afamqp/libafamqp.la modules/afmongodb/libafmongodb.la modules/csvparser/libcsvparser.la modules/confgen/libconfgen.la modules/system-source/libsystem-source.la modules/linux-kmsg-format/liblinux-kmsg-format.la modules/basicfuncs/libbasicfuncs.la modules/cryptofuncs/libcryptofuncs.la modules/dbparser/libdbparser.la modules/afstomp/libafstomp.la modules/pseudofile/libpseudofile.la modules/graphite/libgraphite.la modules/systemd-journal/libsdjournal.la modules/kvformat/libkvformat.la '/home/gkuma020/PERFORCE/7.X.X.R01-gkuma020-gg/engr/sw/tps/built/46/7.X.X.R01/ppc_common/lib/syslog-ng' libtool: install: error: cannot install `modules/syslogformat/libsyslogformat.la' to a directory not ending in //lib/syslog-ng make[5]: *** [install-moduleLTLIBRARIES] Error 1 make[4]: *** [install-am] Error 2 make[3]: *** [install-recursive] Error 1 make[2]: *** [install] Error 2 make[2]: Leaving directory `/home/gkuma020/PERFORCE/7.X.X.R01-gkuma020-gg/engr/sw/tps/objs/46/7.X.X.R01/ppc_common/syslog-ng' make[1]: *** [/home/gkuma020/PERFORCE/7.X.X.R01-gkuma020-gg/engr/sw/tps/built/46/7.X.X.R01/ppc_common/sbin/syslog-ng] Error 2 make[1]: Leaving directory `/home/gkuma020/PERFORCE/7.X.X.R01-gkuma020-gg/engr/sw/tps' make: *** [tps-build] Error 2 Regards, Girish

2 5

Re: [syslog-ng] syslog-ng Digest, Vol 130, Issue 27
by Ho, Ming 23 Feb '16

23 Feb '16

Hi Peter, Thanks for the quick response. The admin guide and your blog only mentioned to install gradle, which I did, but no mention of how to use it to build Java modules. I am not a software developer and have not heard/use gradle before. It will be very kind and helpful of you if you can provide me the steps how to do so. And any additional steps I need to do for compilation after the Java modules created. I also try your syslog-ng-java-hack-1.0-1.el6.x86_64.rpm. I copy all the jars files to /usr/local/lib/syslog-ng/java-modules and then run "configure" but the Java module is still not included. What is the correct steps if I use the provided jar files? Thanks. Ming -----Original Message----- From: syslog-ng-bounces(a)lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of syslog-ng-request(a)lists.balabit.hu Sent: Saturday, February 20, 2016 3:00 AM To: syslog-ng(a)lists.balabit.hu Subject: syslog-ng Digest, Vol 130, Issue 27 Send syslog-ng mailing list submissions to syslog-ng(a)lists.balabit.hu To subscribe or unsubscribe via the World Wide Web, visit https://lists.balabit.hu/mailman/listinfo/syslog-ng or, via email, send a message with subject or body 'help' to syslog-ng-request(a)lists.balabit.hu You can reach the person managing the list at syslog-ng-owner(a)lists.balabit.hu When replying, please edit your Subject line so it is more specific than "Re: Contents of syslog-ng digest..." Today's Topics: 1. Re: Not able to compile syslog-ng OSE with Java support (Czanik) 2. ECONNREFUSED on /dev/log (?rp?d Magos?nyi) ---------------------------------------------------------------------- Message: 1 Date: Sat, 20 Feb 2016 07:47:23 +0100 From: Czanik, P?ter <peter.czanik(a)balabit.com> Subject: Re: [syslog-ng] Not able to compile syslog-ng OSE with Java support To: "Syslog-ng users' and developers' mailing list" <syslog-ng(a)lists.balabit.hu> Message-ID: <CANcUavtxRVrSQwcaAB0WV27uO+gsR1T7kT8rQqq63Rev+ns+Ag(a)mail.gmail.com> Content-Type: text/plain; charset="utf-8" You will also need gradle to build Java modules: http://gradle.org/ Bye, Peter Czanik (CzP) <peter.czanik(a)balabit.com> Balabit / syslog-ng upstream http://czanik.blogs.balabit.com/ https://twitter.com/PCzanik On Sat, Feb 20, 2016 at 7:02 AM, 'Ho, Ming' via SYSLOG-NG < syslog-ng(a)balabit.com> wrote: > Hello, > > I am able to compile syslog-ng 3.7.2 without the Java-based modules > included successfully and the syslog-ng run fine. Now I need to > re-compile again with the Java-based modules included. I execute the > following steps listed in the syslog-ng-3.7-ose-admin guide: > > Installed openjdk version "1.8.0_71" > Installed gradle version 2.11 > export PKG_CONFIG_PATH=/usr/local/lib/pkgconfig:$PKG_CONFIG_PATH > export > LD_LIBRARY_PATH=/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.71-1.b15.el6_7.x > 86_64/jre/lib/amd64/server:$LD_LIBRARY_PATH > > When I run ./configure, I notice the java module option is set to "no" > in the summary: > Modules: > Module search path : ${exec_prefix}/lib/syslog-ng > Sun STREAMS support (module): no > SQL support (module) : no > PACCT module (EXPERIMENTAL) : no > MongoDB destination (module): yes > JSON support (module) : no > SMTP support (module) : no > AMQP destination (module) : yes > STOMP destination (module) : yes > GEOIP support (module) : no > Redis support (module) : no > Riemann destination (module): no > python : yes (pkg-config package: python) > java : no > > I go ahead to execute "make" and "make install" without error. But I > don't see the "java-modules" directory is created in > /usr/local/lib/syslog-ng directory. > When I include the following declaration in my syslog-ng.conf to start > syslog-ng, I got the following error: > [2016-02-20T05:46:59.039466] Plugin module not found in 'module-path'; > module-path='/usr/local/lib/syslog-ng', module='mod-java' > > Why Java modules is not included? What steps am I missing? > Any help is appreciated > > Ming > > > > ______________________________________________________________________ > ________ Member info: > https://lists.balabit.hu/mailman/listinfo/syslog-ng > Documentation: > http://www.balabit.com/support/documentation/?product=syslog-ng > FAQ: http://www.balabit.com/wiki/syslog-ng-faq > > >

2 1

Reg; Syslog-ng does not recognize the audit facility
by Justin Kala 22 Feb '16

22 Feb '16

Hi Syslog-ng is unable to recognize the facility audit. When I put filter as audit and restart syslog-ng it errors out. When I put the facility code as 13 ,it does not error on restarting the service but does not capture the syslog message received through this filter code 13 as well. Please advise. -- Kaladhar

3 10

ECONNREFUSED on /dev/log
by Árpád Magosányi 22 Feb '16

22 Feb '16

Hi! "strace logger hello" output contains this line: connect(3, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = -1 ECONNREFUSED (Connection refused) I see logs in /dev/xconsole, just cannot emit a log line with logger. What could be the cause? additional info: # cat /etc/syslog-ng/syslog-ng.conf @version: 3.3 @include "scl.conf" # First, set some global options. options { chain_hostnames(off); flush_lines(0); use-dns(persist_only); dns-cache-hosts(/etc/hosts);use_fqdn(no); owner("root"); group("adm"); perm(0640); stats_freq(0); time_reap(1000); bad_hostname("^gconfd$"); }; source s_src { system(); internal(); }; #destination d_net { tcp("91.143.88.140" port(10000) tls(ca-dir("/etc/ssl") cert-file("/etc/ssl/newcert.pem") key_file("/etc/ssl/private/newkey.pem") )); }; destination d_net { tcp("infra.edemokraciagep.org" port(10000) tls(ca-dir("/etc/ssl") peer-verify(optional-untrusted))); }; destination d_messages { file("/var/log/messages");}; destination d_xconsole { pipe("/dev/xconsole"); }; destination d_apache_console { pipe("/dev/apacheconsole"); }; filter apache_log { program("apache"); }; filter non_apache_log { not program("apache"); }; destination d_vhost_gepnarancs { file("/var/log/vhost_gepnarancs"); }; filter f_gepnarancs { program("apache:php:gepnarancs") or message("gepnarancs"); }; log { source(s_src); filter(f_gepnarancs); destination(d_vhost_gepnarancs); }; log { source(s_src); destination(d_messages); }; log { source(s_src); filter(non_apache_log) ; destination(d_xconsole); }; log { source(s_src); filter(apache_log); destination(d_apache_console); }; log { source(s_src); destination(d_net); }; @include "/etc/syslog-ng/conf.d/" --------------------------------- # lsof |grep /dev/xconsole syslog-ng 2608 root 15u FIFO 0,5 0t0 19564 /dev/xconsole cat 2641 root 3r FIFO 0,5 0t0 19564 /dev/xconsole --------------------------------- # lsof |grep /dev/log [no output] --------------------------------- # dpkg -l syslog-ng Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Name Version Architecture Description +++-================================================-=============================-=============================-====================================================================================================== ii syslog-ng 3.5.6-2 all Enhanced system logging daemon (metapackage) -------------------------------- # ls -l /dev/log srw-rw-rw- 1 root root 0 Feb 20 11:03 /dev/log --------------------------------

3 7

GSOC 2016 Information
by Yogesh Gopal 22 Feb '16

22 Feb '16

Hi All, I took a look at the potential projects for GSOC 2016 and I found *syslog-ng for Java *project to be synchronizing with my area of interest.Can anyone please throw some more light on this project so that I will get profound knowledge.Also,I would like to contribute to the organization by solving open issues. Regards, Yogesh

2 2

Re: [syslog-ng] Not able to compile syslog-ng OSE with Java support
by Ho, Ming 20 Feb '16

20 Feb '16

Hello, I am able to compile syslog-ng 3.7.2 without the Java-based modules included successfully and the syslog-ng run fine. Now I need to re-compile again with the Java-based modules included. I execute the following steps listed in the syslog-ng-3.7-ose-admin guide: Installed openjdk version "1.8.0_71" Installed gradle version 2.11 export PKG_CONFIG_PATH=/usr/local/lib/pkgconfig:$PKG_CONFIG_PATH export LD_LIBRARY_PATH=/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.71-1.b15.el6_7.x86_64/jre/lib/amd64/server:$LD_LIBRARY_PATH When I run ./configure, I notice the java module option is set to "no" in the summary: Modules: Module search path : ${exec_prefix}/lib/syslog-ng Sun STREAMS support (module): no SQL support (module) : no PACCT module (EXPERIMENTAL) : no MongoDB destination (module): yes JSON support (module) : no SMTP support (module) : no AMQP destination (module) : yes STOMP destination (module) : yes GEOIP support (module) : no Redis support (module) : no Riemann destination (module): no python : yes (pkg-config package: python) java : no I go ahead to execute "make" and "make install" without error. But I don't see the "java-modules" directory is created in /usr/local/lib/syslog-ng directory. When I include the following declaration in my syslog-ng.conf to start syslog-ng, I got the following error: [2016-02-20T05:46:59.039466] Plugin module not found in 'module-path'; module-path='/usr/local/lib/syslog-ng', module='mod-java' Why Java modules is not included? What steps am I missing? Any help is appreciated Ming

2 1

Virtual Client
by amey jain 20 Feb '16

20 Feb '16

Hi, I was reading documentation on syslog-ng. I got the fact that there are three operation modes:Sever,client and relay mode. I want to know how to test these modes on my computer. Simple way out, I have a single computer and I want to run syslog-ng server then how will I make virtual clients on the same computer. How will I run both syslog server and syslog client on my same computer for developing it? Regards Amey Jain

1 1

GSoC 2016: Project: syslog-ng for Python
by Amar Budhiraja 19 Feb '16

19 Feb '16

Hi mentors , I am an undergraduate student at IIIT-Hyderabad, India and I am interested in the project proposed by Mr Budai on having syslog-ng for Python. Last year, I interacted with Mr Zoltan about the project of monitoring syslog-ng via an android application. However, I couldn't make it. I consider myself to be fairly proficient in both C and Python. I have had several assignments in both C and Python both in and out of course work. I developed a entire bash terminal in C in my sophomore year. I also developed an application layer protocol in C in the same apart from several minor course projects . I have been working on Python for about 3 year now. I developed a Q/A engine, multiple web apps and implemented the entire Adwords (Google's Search Engine Advertising Framework) for my research paper in Python apart from other projects. Some of my work is available at https://github.com/budhiraja. I also have good understand of syslog-ng at a user level. I am interested in the syslog-ng for Python project. My interest comes from the fact that I will get to learn and build a multi-language system. Can you please guide me on how to move forward with the same? Thanks Sincerely, Amar Budhiraja

2 1

syslog-ng 3.7.x support on armv7 architecture
by Girish Kumar 18 Feb '16

18 Feb '16

Hi All, Please let me know whether syslog-ng 3.7.x is supported on armv7 architecture. I went through the following link and found that armv7 is not listed https://www.balabit.com/sites/default/files/documents/syslog-ng-ose-latest-… 1.6. Supported platforms The syslog-ng Open Source Edition application is highly portable and is known to run on a wide range of hardware architectures (x86, x86_64, SUN Sparc, PowerPC 32 and 64, Alpha) Regards, Girish

4 11

Testing filter rules, How can I log structure and data to a fifo ?
by Scot 16 Feb '16

16 Feb '16

Searched for 2 hours this morning and could not find the answer. Testing message filters and I'd like to be able to log all the meta data value pairs to a fifo to make troubleshooting easier. Like RSYSLOG_DebugFormat

3 3