June 2019 - syslog-ng - lists.balabit.hu

Difficulty with Elasticsearch Destination
by Kelly Marchewa 16 Jun '19

16 Jun '19

Greetings all: I recently installed syslog-ng on my Debian 9 system. I have tested syslog-ng with a file destination and everything seemed fine. Now, I am attempting?? to set the destination to my local Elasticsearch instance. However, I am receiving the following error: /Error parsing destination, destination plugin elasticsearch-http not found in /etc/syslog-ng/syslog-ng.conf at line 44, column 1:/ /elasticsearch-http(/ /^^^^^^^^^^^^^^^^^^/ My configuration, based on the documentation: /elasticsearch-http(////?? index("syslog")////?? type("test")////?? url("http:/localhost:9200/_bulk"));////};/ Output of syslog-ng --version: /syslog-ng 3.8.1////Installer-Version: 3.8.1////Revision: 3.8.1-10////Module-Directory: /usr/lib/syslog-ng/3.8////Module-Path: /usr/lib/syslog-ng/3.8////Available-Modules: disk-buffer,redis,date,afstomp,afprog,afsocket,pseudofile,confgen,csvparser,afsql,kvformat,geoip-plugin,afuser,afsmtp,system-source,mod-python,afamqp,riemann,linux-kmsg-format,dbparser,basicfuncs,syslogformat,graphite,afmongodb,json-plugin,cryptofuncs,affile,sdjournal,cef,add-contextual-data////Enable-Debug: off////Enable-GProf: off////Enable-Memtrace: off////Enable-IPv6: on////Enable-Spoof-Source: on////Enable-TCP-Wrapper: on////Enable-Linux-Caps: off/ I saw no indication in the documentation that any special modules/plugins needed to be loaded to use Elasticsearch as the destination. Any pointers as to what the issue is would be appreciated. Thanks! -- Kelly Marchewa kelly_marchewa(a)yahoo.com

2 1

Ring buffered Log into file or Db
by Yiğit YAŞAR 13 Jun '19

13 Jun '19

Hi All, I got a limited system so i need ring buffered logging for protect disk space. I did some research but i could not found the answer. Does syslog-ng support ring buffer for logging to file or db ? Best Regards, Yigit

2 1

syslog-ng at Splunk Live in London
by Peter Czanik (pczanik) 12 Jun '19

12 Jun '19

Hi, The next Splunk Live event is tomorrow in London: https://live.splunk.com/london While there you are there you should also visit the syslog-ng booth and learn, how syslog-ng can provide you with a scalable log management layer in front of Splunk. Register for demo with my colleagues at https://www.syslog-ng.com/register/120335/ Bye, Peter Czanik (CzP) <peter.czanik(a)oneidentity.com> Balabit (a OneIdentity company) / syslog-ng upstream https://syslog-ng.com/community/ https://twitter.com/PCzanik

1 0

Need Assistance:error while loading shared libraries: libsyslog-ng-3.6.so.0
by Nitish Saboo 11 Jun '19

11 Jun '19

Hi, I am using syslog-ng-3.6.2 ( https://src.fedoraproject.org/lookaside/pkgs/syslog-ng/syslog-ng_3.6.2.tar.… ). I want to use syslog-ng header files in my project. I am calling syslog-ng code from my Go code. I compiled my source code in my local system ( go build -v -x main.go) and created a binary called 'main'. My binary is running successfully on my local system. When I copy the binary ('main') in another Linux box and try to run it as './main' it is giving me the following error: ubuntu@ingest-0693b91d:~$ ./main ./main: error while loading shared libraries: libsyslog-ng-3.6.so.0: cannot open shared object file: No such file or directory I have syslog-ng-3.6.2 shared files in the following location '/home/ubuntu/test/syslog/syslog-ng-3.6.2/install/lib/syslog-ng' and I have set LD_LIBRARY_PATH to {prefix}/lib/syslog-ng Can someone please guide me, why is it giving such error ? Thanks, Nitish

2 1