- syslog-ng - lists.balabit.hu

Trying to build RPM
by Andrew Kerr 09 Oct '07

09 Oct '07

Hi folks, I've downloaded the source for syslog-ng 2.0.5 and am trying to build an RPM. When I try, I get a missing dependency with libevtlog-devel. I did compile and install eventlog-0.2.5, as well as adding /usr/local/lib to /etc/ld.so.conf. Even if I just try configuring syslog-ng, I get a similar error: 'No package eventlog' found. Thanks

2 1

E-mail alert from Syslog-NG!
by Wilson Lai 08 Oct '07

08 Oct '07

Dear ALL, Would there be any tool to check the severity of the log message and alert me by mail once receiving the event log message with “error” severity? Thanks. Regards, Wilson Lai System Engineer IT Dept., SJM Office ( : (853)2978585 Mobile ( : (853)66506709 Email +: : wilsonlai(a)macausjm.com

2 1

syslog-ng git changes
by Balazs Scheidler 07 Oct '07

07 Oct '07

Hi, The git repository of syslog-ng has moved to a new location: git://git.balabit.hu/bazsi/syslog-ng-2.0.git/ We've also set up gitweb to make it easier to browse/check syslog-ng changes, it is available at: http://git.balabit.hu/ The VCS instructions on the webpage has been updated to indicate the change. -- Bazsi

2 1

Evaluation for no. of sessions handled by Syslog-ng!
by Wilson Lai 03 Oct '07

03 Oct '07

Dear ALL, If I have 100 servers and 100 network devices which want to collect all the logs to a Syslog-Ng Centralized server, would It be possible that the Syslog-NG could handle such numerous sessions? I am using the MYSQL DB. Thanks. Regards, Wilson Lai System Engineer IT Dept., SJM Office ( : (853)2978585 Mobile ( : (853)66506709 Email +: : wilsonlai(a)macausjm.com

2 1

What packages need?‏
by hi ro 01 Oct '07

01 Oct '07

Hi, What packages does it need to compile syslog-ng?Is it the same package when to make RPM? (bison, flex, gcc-c++, pkgconfig, glib2-devel, libevtlog-devel)(It needs only libc to compile eventlog, doesn't it?) And if it's not necessary to connect database, does it need to install libdbi8? Thankshiro _________________________________________________________________ マイクロソフトの最新次世代ブラウザIE7にMSN版ならではの便利な機能をプラス http://promotion.msn.co.jp/ie7/

1 0

Syslog-ng 1.6.11 from HP porting center
by Uwe Martin 28 Sep '07

28 Sep '07

Hello, I installed the syslog_ng-1.6.11-hppa-11.11.depot.gz from HP porting center on a HP 9000/800/rp3440 "HP-UX xyz B.11.11 U 9000/800 189374938 unlimited-user license". After starting /usr/local/bin/syslog-ng -v -s, I got the following error : Segmentation fault (core dumped). Anybody an idea what is wrong on the installtion? kind regards Uwe MArtin Festo AG & Co. KG Uwe Martin Abteilung IN-O Network-Operation Obere Kaiserstraße 303 D - 66386 St. Ingbert Tel: ++49 (0) 6894-591-6323 Fax: ++49 (0) 6894-591-6326 http://www.festo.com Der Inhalt dieses E-Mails ist ausschliesslich fuer den bezeichneten Adressaten bestimmt. Jede Form der Kenntnisnahme, Veroeffentlichung, Vervielfaeltigung oder Weitergabe des Inhalts dieses E-Mails durch unberechtigte Dritte ist unzulaessig. Wir bitten Sie, sich mit dem Absender des E-Mails in Verbindung zu setzen, falls Sie nicht der Adressat dieses E-Mails sind und das Material von Ihrem Computer zu loeschen. This e-mail and any attachments are confidential and intended solely for the addressee. The perusal, publication, copying or dissemination of the contents of this e-mail by unauthorised third parties is prohibited. If you are not the intended recipient of this e-mail, please delete it and immediately notify the sender. Rechtsform: Kommanditgesellschaft Sitz: Esslingen a.N. Registergericht Stuttgart HRA 211583 Umsatzsteuerident-Nummer: DE 145339206 Persoenlich haftende Gesellschafterin:Festo Aktiengesellschaft Sitz: Stuttgart Registergericht Stuttgart HRB 18535 Vorstand: Dr. Ekkehard Gericke, Lothar Kempf, Dipl.-Ing. Rudi Menrad Dr. Thomas Rubbe Dr. Eberhard Veit (Sprecher) Dr. Ulrich Walker Aufsichtsratsvorsitzender: Dr. Wilfried Stoll

2 1

Re: [syslog-ng] Assistance compiling 1.6.12
by tim.brown＠juno.com 28 Sep '07

28 Sep '07

That would be ideal if I could locate a version of glib >= 2.2 for Solaris 9 on sparc, based on the following: checking for GLIB... Requested 'glib-2.0 >= 2.2' but version of GLib is 2.0.7 no configure: error: Cannot find GLib library version >= 2.2: is pkg-config in path? Thanks -- Carson Gaspar <carson(a)taltos.org> wrote: Carson Gaspar wrote: > Andrej Ricnik-Bay wrote: >> On 6/26/07, tim.brown(a)juno.com <tim.brown(a)juno.com> wrote: > >>> I've scanned the net for references to "-lxnet" on Solaris and could >>> only determine that is a library routine particular to Linux. I could >>> not find how to provide this on a Solaris platform. >> >> No, it's not. It's part of SUNWcslx and I've never seen it on any >> Linux machine :} > > Why is syslog-ng trying to link in the XTI library? Something is wrong, > here... Ah, libol's autoconf code adds in libxnet even though it isn't needed. I'm not sure what the code is _trying_ to do, but it's doing it wrong. On the plus side, I don't see references to xnet in the 2.0.4 syslog-ng, nor in the 0.2.5 eventlog. So my advice is to skip the old code and use the shiny new stuff. -- Carson _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html _____________________________________________________________ Save on Tax Preparation Services. Click here. http://track.juno.com/s/lc?u=http://tagline.untd.us/fc/Ioyw6iigAEckp8Ap1pqX…

3 2

ICMP port unreachable sent to one of logging hosts
by Karel Hendrych 27 Sep '07

27 Sep '07

Hi, I'm experiencing strange issue with syslog-ng 2.0.5 build on a CentOS4 machine. One of a logging hosts receives after syslog message a ICMP port unreachable message sent from machine running syslog-ng. Other hosts logging is working fine. The only difference between logging hosts and this single not logging host is a little bit faster logging rate. Aprox. 10 log records/s. Debug option did not show something interesting why the syslog's are not being accepted. There is no firewall/filtering on the log server. Here is my simple config: options { use_fqdn(no); use_dns(persist_only); dns_cache_hosts(/etc/hosts); keep_hostname(yes); long_hostnames(off); sync(1); log_fifo_size(1024); perm(0640); }; source src { udp(ip("0.0.0.0") port(514) so_rcvbuf(4194304) ); tcp(ip("0.0.0.0") port(514)); }; source self { internal(); }; destination central {file("/var/log/central/$HOST_FROM.log"); }; destination self {file("/var/log/central/syslog-ng.log"); }; log { source(src); destination(central); }; log { source(self); destination(self); }; netstat -su output: 20578970 packets to unknown port received. 464 packet receive errors 190828 packets sent Does anyone have some idea how to deal with it? -- Karel

1 0

why dose the usage of mem by syslog-ng keep growing?
by liuruihong 27 Sep '07

27 Sep '07

the configure file as follows: options { use_dns(no); create_dirs(yes);ts_format(iso); }; #options { log_fifo_size(3000); }; source src { udp(ip(0.0.0.0) port(514) ); }; filter f_kern { facility(kern); }; filter f_authpriv { facility(auth,authpriv); }; filter f_mail { facility(mail); }; filter f_cron { facility(cron); }; filter f_boot { facility(local7); }; filter f_spooler { facility(uucp, news) and level(crit..emerg); }; filter f_messages { level(info..emerg) and not facility(authpriv, cron, mail); }; destination kern { file("/home/syslog-ng/$YEAR/$HOST/kernel-$MONTH"); }; destination authpriv { file("/home/syslog-ng/$YEAR/$HOST/secure-$MONTH"); }; destination mail { file("/home/syslog-ng/$YEAR/$HOST/maillog-$MONTH"); }; destination cron { file("/home/syslog-ng/$YEAR/$HOST/cron-$MONTH"); }; destination boot { file("/home/syslog-ng/$YEAR/$HOST/boot.log-$MONTH"); }; destination spooler { file("/home/syslog-ng/$YEAR/$HOST/spooler-$MONTH"); }; destination messages { file("/home/syslog-ng/$YEAR/$HOST/messages-$MONTH"); }; log { source(src); filter(f_kern); destination(kern); }; log { source(src); filter(f_authpriv); destination(authpriv); }; log { source(src); filter(f_mail); destination(mail); }; log { source(src); filter(f_cron); destination(cron); }; log { source(src); filter(f_boot); destination(boot); }; log { source(src); filter(f_spooler); destination(spooler); }; log { source(src); filter(f_messages); destination(messages); }; syslog-ng receive logs from about 1000 clients ,and the usage of mem by syslog-ng keeps growing,here are a days record of the usage of mem(got by command 'ps aux'): cup %mem 0.1 29.9 0.1 30.1 0.1 30.3 0.1 30.5 0.1 30.7 0.1 30.9 0.1 31.1 0.1 31.2 0.1 31.4 0.1 31.6 0.1 31.9 0.1 32.1 0.1 32.3 0.1 32.4 0.1 32.6 0.1 32.8 0.1 33.0 0.1 33.2 0.1 33.4 0.1 33.5 0.1 33.8 0.1 33.9 0.1 34.1 0.1 34.3 0.1 34.5 0.1 34.6 0.1 34.9 0.1 35.0 0.1 35.2

5 13

Re: [syslog-ng] Compiling on HP/UX 11.11
by C Wells 27 Sep '07

27 Sep '07

> > So I modified configure to copy out a conftest.l since > > it cleans it up. Then I tried running > > flex -d -o pleasework conftest.l and get the same > > result, can not find output. What should I try next ? > > I think it must have something to do with the "fatal error" that flex is > reporting: > > "flex: fatal internal error, exec failed" > > Where did you get the flex binary from? I obtained flex from this link http://hpux.connect.org.uk/hppd/hpux/Gnu/flex-2.5.33/ I will try and remove it and reinstall. Are there any other workarounds if I can't make flex work ? Thanks ____________________________________________________________________________________ Tonight's top picks. What will you watch tonight? Preview the hottest shows on Yahoo! TV. http://tv.yahoo.com/

2 1