- syslog-ng - lists.balabit.hu

syslog-ng not writing logs to /var/log/messages
by Shashank Vinchurkar 29 Oct '07

29 Oct '07

Hi, I am unable to get the syslog-ng to write messages to the /var/log/messages file. Syslog-ng receives the messages but doesn't seem to write it to the /var/log/message file. Here is the log from the syslog-ng: /syslog-ng # /syslog-ng/sbin/syslog-ng -e -v -d -F -f /syslog-ng/syslog-ng.conf -C / syslog-ng starting up; version='2.0.5' Syslog connection accepted; from='AF_UNIX(anonymous)', to='AF_UNIX(/dev/log)' Incoming log entry; line='<83>Mar 3 18:54:10 login: pam_rohati_auth(login:auth): user name not valid' Filter rule evaluation begins; filter_rule='f_filter2' Filter node evaluation result; filter_result='match', filter_type='level' Filter rule evaluation result; filter_result='match', filter_rule='f_filter2' Initializing destination file writer; template='/var/log/messages', filename='/var/log/messages' Incoming log entry; line='<85>Mar 3 18:54:10 login: FAILED LOGIN SESSION FROM (null) FOR , System error' Filter rule evaluation begins; filter_rule='f_filter2' Filter node evaluation result; filter_result='match', filter_type='level' Filter rule evaluation result; filter_result='match', filter_rule='f_filter2' EOF occurred while reading; fd='6' Closing log reader fd; fd='6' Here is the syslog-ng configuration file: options { sync (2); time_reopen (10); log_fifo_size (10); long_hostnames (off); use_dns (no); use_fqdn (no); create_dirs (yes); keep_hostname (yes); }; source s_sys { unix-stream ("/dev/log"); # internal(); }; destination d_cons { file("/dev/console"); }; destination d_mesg { file("/var/log/messages"); }; filter f_filter2 { level(info..emerg); }; log { source(s_sys); filter(f_filter2); destination(d_mesg); }; log { source(s_sys); destination(d_mesg); flags(fallback);}; Thanks in advance for help. -Shashank

1 0

timestamps
by Jay Krous 28 Oct '07

28 Oct '07

Hello list, We have a central syslog server that we would like to record both the timestamp send by the client and the receipt timestamp. In other words, a keep_timestamp(yes and no) option. Ideas? -Jay -- Jack (Jay) E. Krous III Computer Protection Program Lawrence Berkeley National Laboratory http://www.lbl.gov/~jekrous/pgp.txt (510) 495-2522

3 2

glibc 2.0.6
by Raffaele 23 Oct '07

23 Oct '07

Hi, I need to compile syslog-ng with glibc 2.0.6 (don't tell me to upgrade the system... it's another 'sad system administration without power story'), can anyone tell me if any older version of syslog-ng work with this glibc? Thanks Raffaele

7 12

Redirect syslog-ng to ttyS0
by kjell.danielsen＠hjemme.no 23 Oct '07

23 Oct '07

Have redirected syslog to ttyS0. The logging to ttyS0 stops when I login to ttyS0 (as a terminal). Have to restart syslog to start the logging again. From my /etc/syslog-ng/syslog-ng.conf: filter f_mxone { facility(local4, local5, local6, auth) and match(“Alarm”); } destination mx_com1 {file(“/dev/ttyS0”); }; log { source(src); filter(f_mxone); destination(mx_com1); }; >From /etc/inittab : S0:2345:respawn:/sbin/agetty -L 9600 ttyS0 vt102 I use Suse Linux (SLES 10) and syslog-ng 1.6.8 Can anyone help? Kjell

3 2

Re: [syslog-ng] hpux 11.00 premium edition or GPL
by C Wells 18 Oct '07

18 Oct '07

The libraries that the ldd show below all exist on this 11.00 box, but the sylog-ng binary errors out with /usr/lib/dld.sl: Unresolved symbol: memalign (code) from /usr/local/sbin/syslog-ng Abort(coredump) It wouldn't make sense to get this to work on 11.00 if your environment is 11.11, but thanks for offering. > On 10/18/07, Balazs Scheidler <bazsi(a)balabit.hu> > wrote: > > On Wed, 2007-10-17 at 12:54 -0700, C Wells wrote: > > > Does either exist ? I thought I was dealing with > a > > > 11.11 box but have found it to be 11.00. > > > > > > > Our compile farm has this HP-UX version: > > > > # uname -a > > HP-UX hpux B.11.11 U 9000/871 2015302714 > unlimited-user license > > > > The binary (this is actually a PE version, but the > OSE should be > > similar) has these dependencies: > > > > # ldd syslog-ng > > /usr/lib/libc.2 => /usr/lib/libc.2 > > /usr/lib/libdld.2 => /usr/lib/libdld.2 > > /usr/lib/libc.2 => /usr/lib/libc.2 > > /usr/lib/librt.2 => /usr/lib/librt.2 > > /usr/lib/libnsl.1 => /usr/lib/libnsl.1 > > /usr/lib/libxti.2 => /usr/lib/libxti.2 > > > > Providing a separate binary for HP-UX 11.00 would > need some work to > > extend our build farm, which is work that needs to > be done. > > > > This is the first request for HP-UX 11.00 > binaries, thus I would need > > some hard facts to convince our management that > it's worth the effort. > > > > Are you sure the HP-UX 11.11 binaries don't work > on HP-UX 11.00 ? I > > think it's at least worth a try. > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

Re: [syslog-ng] Compiling on HP/UX 11.11
by C Wells 18 Oct '07

18 Oct '07

> > I will try and remove it and reinstall. Are there > any > other workarounds if I can't make flex work ? > > Thanks Well I tried to compile flex from scratch, but that was a disaster. So I removed Flex and reinstalled and the configure completed without error. Then I tried make and got this gcc -g -O2 -Wall -g -o syslog-ng main.o libsyslog-ng.a -lnsl -lrt -lfl -L/usr/local/lib -lglib-2.0 -lintl -liconv -L/usr/local/lib -levtlog -lnet /usr/ccs/bin/ld: Unsatisfied symbols: linenum (first referenced in libsyslog-ng.a(cfg-grammar.o)) (data) lookup_parse_flag (first referenced in libsyslog-ng.a(cfg-grammar.o)) (code) strtoll (first referenced in libsyslog-ng.a(affile.o)) (code) yylex (first referenced in libsyslog-ng.a(cfg-grammar.o)) (code) lex_init (first referenced in libsyslog-ng.a(cfg.o)) (code) collect2: ld returned 1 exit status Any ideas of what to try next ?? THanks ____________________________________________________________________________________ Tonight's top picks. What will you watch tonight? Preview the hottest shows on Yahoo! TV. http://tv.yahoo.com/

4 5

hpux 11.00 premium edition or GPL
by C Wells 18 Oct '07

18 Oct '07

Does either exist ? I thought I was dealing with a 11.11 box but have found it to be 11.00. Thanks __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

Syslog-ng on Tru64
by Carlos Zampar 17 Oct '07

17 Oct '07

Hi all, I need more information about to install syslog-ng on Tru64 it´s possible? If yes how to install it? Need compilation in Tru64? Or exists binaries files for this? Thanks in advance. Best Regards. Carlos Zampar

1 0

PHP-Syslog-NG questions!
by Wilson Lai 17 Oct '07

17 Oct '07

Dear ALL, I have created few tables in the MYSQL DB. I am trying to use the php-syslog-ng to view the tables for particular person. My question is : 1. Could the PHP-Syslog-NG config the dbinfo.inc.php for each table? 2. Could the PHP-Syslog-NG config each table access by particular person? Thanks. Regards, Wilson Lai System Engineer IT Dept., SJM Office ( : (853)2978585 Mobile ( : (853)66506709 Email +: : wilsonlai(a)macausjm.com

1 0

Microsoft SQL
by Mike Lott 17 Oct '07

17 Oct '07

Hi all I was just wondering whether it was possible to get Syslog-NG to write to a MS SQL database cluster. I understand that the Premium Edition supports more DB's, but did not see any mention of MS SQL. Any ideas, or has anyone achieved this? Thanks, Mike

3 2