- syslog-ng - lists.balabit.hu

Re: [syslog-ng] Logging Third party application logs to Syslog-NG
by Wilson Lai 17 Aug '07

17 Aug '07

Dear Bill, If there is a Scalix application which generate the log file in "/var/opt/Scalix/ml/s/logs/fatal", where "fatal" is the log file. How could the source be defined to be listened by Syslog-NG? Thanks. Regards, Wilson Lai System Engineer IT Dept., SJM Office ( : (853)2978585 Mobile ( : (853)66506709 Email +: : wilsonlai(a)macausjm.com -----Original Message----- From: syslog-ng-request(a)lists.balabit.hu [mailto:syslog-ng-request@lists.balabit.hu] Sent: Thursday, August 16, 2007 6:00 PM To: syslog-ng(a)lists.balabit.hu Subject: syslog-ng Digest, Vol 28, Issue 20 Send syslog-ng mailing list submissions to syslog-ng(a)lists.balabit.hu To subscribe or unsubscribe via the World Wide Web, visit https://lists.balabit.hu/mailman/listinfo/syslog-ng or, via email, send a message with subject or body 'help' to syslog-ng-request(a)lists.balabit.hu You can reach the person managing the list at syslog-ng-owner(a)lists.balabit.hu When replying, please edit your Subject line so it is more specific than "Re: Contents of syslog-ng digest..." Today's Topics: 1. GLib version problem? (Burns Andrew) 2. Re: GLib version problem? (Geller, Sandor (IT)) 3. Re: GLib version problem? (Valdis.Kletnieks(a)vt.edu) 4. Logging Third party application logs to Syslog-NG in Linux! (Wilson Lai) 5. Re: Logging Third party application logs to Syslog-NG in Linux! (Bill Nash) 6. Troubles with SE-Linux Syslog-ng and ntpd (Martin Voelker) ---------------------------------------------------------------------- Message: 1 Date: Wed, 15 Aug 2007 08:02:38 -0500 From: "Burns Andrew" <aburns(a)snyderdrug.com> Subject: [syslog-ng] GLib version problem? To: <syslog-ng(a)lists.balabit.hu> Message-ID: <699402D08697B94EAB9429B5083FAA1C042C2290(a)exchange_2k.snyderdrug.co m> Content-Type: text/plain; charset="us-ascii" Hello, I'm trying to install syslog-NG onto a Cent OS 5 server, and running into a problem. The problem appears to be more of a RedHat/Cent problem (or even Glib problem) rather than Syslog-NG problem, but I thought I'd check with the community before I harass Red Hat. I have the RPM verion of glib2.12 installed, however the libraries seemed to be labled 2.0.0. When I configure syslog-ng, I run across the following error: checking pkg-config is at least version 0.9.0... yes checking for GLIB... no configure: error: Cannot find GLib library version >= 2.2: is pkg-config in path? [root@syslog syslog-ng-2.0.5]# I have the rpm installed: [root@syslog syslog-ng-2.0.5]# yum list installed glib2 Loading "installonlyn" plugin Loading "fastestmirror" plugin Installed Packages glib2.i386 2.12.3-2.fc6 installed [root@syslog syslog-ng-2.0.5]# However the libraries seem to be mislabeled: [root@syslog syslog-ng-2.0.5]# locate glib | grep "/lib/libg" /lib/libglib-2.0.so.0 /lib/libglib-2.0.so.0.1200.3 [root@syslog syslog-ng-2.0.5]# Am I just missing something simple, or is this a problem I should be trying to speak to Cent/Red Hat about? Thanks! Andrew

2 1

Buffer Overflow : Insufficient buffer space for retrieving STREAMS log message; res='2'
by Nicolas de Marqué - Fromentin 17 Aug '07

17 Aug '07

Hello, During a big flow from a local server to a central server, we have a "buffer overflow" on the local server. After this message, syslog-ng is crash and don't be capable to send any messages. The local server is a solaris 10 product, the central linux a redhat EL4. Do you know a rule to stop this problem Best regard, Nicolas

3 2

new syslog-ng white paper published
by Balazs Scheidler 16 Aug '07

16 Aug '07

Dear all, We have published a new, syslog-ng related white paper on our website titled: "Distributed syslog architectures with syslog-ng" It basically contains the various deployment scenarios, their pros and cons we've encountered in our experience. It does contain information on syslog-ng Premium Edition, but still we tried to concentrate on the technical content, and some of it equally applies to syslog-ng OSE. We'd appreciate feedback at documentation(a)balabit.com. Thanks. -- Bazsi

1 0

Troubles with SE-Linux Syslog-ng and ntpd
by Martin Voelker 16 Aug '07

16 Aug '07

Hi, I have some troubles using syslog-ng on RHEL4 with SE Linux. There comes following message: audit(1187252020.581:514): avc: denied { write } for pid=2646 comm="ntpd" name="log" dev=tmpfs ino=14840162 scontext=root:system_r:ntpd_t tcontext=root:object_r:device_t tclass=sock_file What can I do??? Thanks Martin Westdeutsche Lotterie GmbH & Co. OHG | Sitz: Münster Registergericht: Amtsgericht Münster Handelsregister: Münster HRA 4379 Geschäftsführer: Dr. Winfried Wortmann Vorsitzender des Beirates: Ernst Gerlach Gesellschafter: Nordwestlotto in Nordrhein-Westfalen GmbH | Sitz: Münster Registergericht: Amtsgericht Münster Handelsregister: HRB 3840 Geschäftsführer: Dr. Winfried Wortmann NRW.BANK | Sitz: Düsseldorf und Münster Rechtsform: Anstalt des öffentlichen Rechts Registergerichte: Amtsgerichte Düsseldorf/Münster Handelsregister: Düsseldorf HRA 15277/Münster HRA 5300

1 0

Logging Third party application logs to Syslog-NG in Linux!
by Wilson Lai 16 Aug '07

16 Aug '07

Dear ALL, I am now using the Syslog-NG OSE for centralized logging system. How could I get the third party application (Linux Client) logs logging to the Syslog-NG server? These third party application logs are not managed by the Linux syslog daemon. Would there be someone gives some information or suggestion! Thanks a lot!!! Regards, Wilson Lai System Engineer IT Dept., SJM Office ( : (853)2978585 Mobile ( : (853)66506709 Email +: : wilsonlai(a)macausjm.com

2 1

GLib version problem?
by Burns Andrew 15 Aug '07

15 Aug '07

Hello, I'm trying to install syslog-NG onto a Cent OS 5 server, and running into a problem. The problem appears to be more of a RedHat/Cent problem (or even Glib problem) rather than Syslog-NG problem, but I thought I'd check with the community before I harass Red Hat. I have the RPM verion of glib2.12 installed, however the libraries seemed to be labled 2.0.0. When I configure syslog-ng, I run across the following error: checking pkg-config is at least version 0.9.0... yes checking for GLIB... no configure: error: Cannot find GLib library version >= 2.2: is pkg-config in path? [root@syslog syslog-ng-2.0.5]# I have the rpm installed: [root@syslog syslog-ng-2.0.5]# yum list installed glib2 Loading "installonlyn" plugin Loading "fastestmirror" plugin Installed Packages glib2.i386 2.12.3-2.fc6 installed [root@syslog syslog-ng-2.0.5]# However the libraries seem to be mislabeled: [root@syslog syslog-ng-2.0.5]# locate glib | grep "/lib/libg" /lib/libglib-2.0.so.0 /lib/libglib-2.0.so.0.1200.3 [root@syslog syslog-ng-2.0.5]# Am I just missing something simple, or is this a problem I should be trying to speak to Cent/Red Hat about? Thanks! Andrew

3 2

valid HOSTNAME characters in syslog?
by dave 15 Aug '07

15 Aug '07

What is the source of information for syslog-ng to treat '@' a valid character in HOSTNAME field of syslog message? RFC 3164 refers to another RFC for the validity of HOSTNAME field. Syslog-ng's Syslog Relay treats '@' a valid HOSTNAME character while forwarding syslog. I am trying to find valid character set to be used in HOSTNAME field of syslog message. So that I would know when a Syslog Relay inserts a new HOSTNAME/IP in the syslog message to be forwarded. Appreciate any pointers. ____________________________________________________________________________________Ready for the edge of your seat? Check out tonight's top picks on Yahoo! TV. http://tv.yahoo.com/

4 9

Writing line by line
by Diluka Moratuwage 14 Aug '07

14 Aug '07

Hi, Can I configure the syslog-ng, so that, it writes only line by line. Now few lines at the same time. I mean, I wanna, write one line, and then another, not as a a bunch of lines. What I actually need to do, is reading one line, process it and do some things, and then listen to next line and so on. I highly appreciate if you can provide me information, on how to do this. Thanks Diluka.

2 2

Writing line by line in Syslog-ng
by Diluka Moratuwage 14 Aug '07

14 Aug '07

Hi, Can I configure the syslog-ng, so that, it writes only line by line. Now few lines at the same time. I mean, I wanna, write one line, and then another, not as a a bunch of lines. What I actually need to do, is reading one line, process it and do some things, and then listen to next line and so on. I highly appreciate if you can provide me information, on how to do this. Thanks Diluka.

2 2

how rewrite the HOST macro?
by mobidyc 13 Aug '07

13 Aug '07

Hello, i want to use syslog-ng to receive and log messages, the goal is to write log messages to: /appli/syslog-ng/logs/server0/messages but server0 can have multiples names: server0 server0e1 server0e2 server0g1 server0g2 server0gt1 etc... how can retrieve the name "server0" only ? Regards, Mobidyc

5 9