- syslog-ng - lists.balabit.hu

RE: [syslog-ng] Re: syslog-ng Digest, Vol 14, Issue 9
by SOLIS, ALEX 15 Jun '06

15 Jun '06

Wyane, Of course logdog.pl works with syslog-ng. The config file example sent in the tarball is generously commented. If you need more help, let me know where in the installation you are at and what you want logdog to do and Ill try to help. Alex -----Original Message----- From: syslog-ng-bounces(a)lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of wayne yu Sent: Wednesday, June 14, 2006 2:30 PM To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng] Re: syslog-ng Digest, Vol 14, Issue 9 Hi Alex: The logdog works for the syslogd, does also working with syslog-ng? How do I configure it? Thanks Wayne Yu --- syslog-ng-request(a)lists.balabit.hu wrote: > Send syslog-ng mailing list submissions to > syslog-ng(a)lists.balabit.hu > > To subscribe or unsubscribe via the World Wide Web, > visit > https://lists.balabit.hu/mailman/listinfo/syslog-ng > or, via email, send a message with subject or body > 'help' to > syslog-ng-request(a)lists.balabit.hu > > You can reach the person managing the list at > syslog-ng-owner(a)lists.balabit.hu > > When replying, please edit your Subject line so it > is more specific > than "Re: Contents of syslog-ng digest..." > > > Today's Topics: > > 1. Losing TAG information (SOLIS, ALEX) > 2. how to send alert throuth e-mail with > syslog-ng (wayne yu) > 3. RE: how to send alert throuth e-mail with > syslog-ng (SOLIS, ALEX) > 4. Re: how to send alert throuth e-mail with > syslog-ng (sawall) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 13 Jun 2006 10:07:33 -0500 > From: "SOLIS, ALEX" <asolis(a)oppd.com> > Subject: [syslog-ng] Losing TAG information > To: "Syslog-ng users' and developers' mailing list" > <syslog-ng(a)lists.balabit.hu> > Message-ID: > > <3E061654BA925846A7FAFE98BA3603B71714C401(a)SEPEX04.oppd.oppd-ds.com> > Content-Type: text/plain; charset="us-ascii" > > > I have about 20 or so AIX 4.3 servers that are > sending syslog messages > to a Linux desktop running syslog-ng 1.6.5. Every > now and then I get a > message that does not contain the TAG information or > process ID > information. When I check the local > /var/adm/messages file on the AIX > server, the TAG information is intact. > > An example of an intact message on an AIX server is: > > Jun 13 09:57:11 myhost dbc4 : 3 TRANSACT > 0 0 > 33686 57:11.60 > > > An example of the same message on my syslog server > after syslog-ng gets > a hold of it: > > Jun 13 09:57:11 myhost : 3 TRANSACT 0 > 0 33686 > 57:11.60 > > > As you can see I am losing the dbc4, why? Could it > be because of the > spaces after the dbc4 string? According to RFC > 3164, a space should > simply terminate the TAG field and begin the content > portion of the > message. Am I misunderstanding how this works? > > > Thanks > > > Alex > > > This e-mail contains Omaha Public Power District's > confidential and proprietary information and is for > use only by the intended recipient. Unless > explicitly stated otherwise, this e-mail is not a > contract offer, amendment, nor acceptance. If you > are not the intended recipient you are notified that > disclosing, copying, distributing or taking any > action in reliance on the contents of this > information is strictly prohibited. > > > > ------------------------------ > > Message: 2 > Date: Tue, 13 Jun 2006 12:19:46 -0700 (PDT) > From: wayne yu <zwyu7319(a)yahoo.com> > Subject: [syslog-ng] how to send alert throuth > e-mail with syslog-ng > To: syslog-ng(a)lists.balabit.hu > Message-ID: > <20060613191946.39833.qmail(a)web35910.mail.mud.yahoo.com> > Content-Type: text/plain; charset=iso-8859-1 > > Hi everyone: > > I like to thank those who helped me on the > syslog-ng > earlier, and my syslog-ng is finally working, > except I don't know how to send alerts from system > to > my yahoo mail. Can any one give me some hints. > > Thanks for the help. > > Wayne Yu > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam > protection around > http://mail.yahoo.com > > > ------------------------------ > > Message: 3 > Date: Tue, 13 Jun 2006 14:53:28 -0500 > From: "SOLIS, ALEX" <asolis(a)oppd.com> > Subject: RE: [syslog-ng] how to send alert throuth > e-mail with > syslog-ng > To: "Syslog-ng users' and developers' mailing list" > <syslog-ng(a)lists.balabit.hu> > Message-ID: > > <3E061654BA925846A7FAFE98BA3603B71714C508(a)SEPEX04.oppd.oppd-ds.com> > Content-Type: text/plain; charset="us-ascii" > > I use a perl script called logdog to alert on > specific syslog events. > You can find the script here: > http://caspian.dotconf.net/menu/Software/LogDog/ > > Works good for me, check it out. > > Alex > > > -----Original Message----- > From: syslog-ng-bounces(a)lists.balabit.hu > [mailto:syslog-ng-bounces@lists.balabit.hu] On > Behalf Of wayne yu > Sent: Tuesday, June 13, 2006 2:20 PM > To: syslog-ng(a)lists.balabit.hu > Subject: [syslog-ng] how to send alert throuth > e-mail with syslog-ng > > Hi everyone: > > I like to thank those who helped me on the > syslog-ng > earlier, and my syslog-ng is finally working, > except I don't know how to send alerts from system > to > my yahoo mail. Can any one give me some hints. > > Thanks for the help. > > Wayne Yu > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam > protection around > http://mail.yahoo.com > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/syslog-ng > Frequently asked questions at > http://www.campin.net/syslog-ng/faq.html > > > This e-mail contains Omaha Public Power District's > confidential and proprietary information and is for > use only by the intended recipient. Unless > explicitly stated otherwise, this e-mail is not a > contract offer, amendment, nor acceptance. If you > are not the intended recipient you are notified that > disclosing, copying, distributing or taking any > action in reliance on the contents of this > information is strictly prohibited. > > > > ------------------------------ > > === message truncated === __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html This e-mail contains Omaha Public Power District's confidential and proprietary information and is for use only by the intended recipient. Unless explicitly stated otherwise, this e-mail is not a contract offer, amendment, nor acceptance. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Re: syslog-ng Digest, Vol 14, Issue 9
by wayne yu 14 Jun '06

14 Jun '06

Hi: I got Jun 13 22:30:58 bestball3 syslog-ng[17783]: STATS: dropped 0 in my in my log , I don't know what is mean. ALso, How could I set up a central log file, insteas i have to open 20 directory(name after node name) . Thanks for reply. Wayne Yu syslog-ng-request(a)lists.balabit.hu wrote: > Send syslog-ng mailing list submissions to > syslog-ng(a)lists.balabit.hu > > To subscribe or unsubscribe via the World Wide Web, > visit > https://lists.balabit.hu/mailman/listinfo/syslog-ng > or, via email, send a message with subject or body > 'help' to > syslog-ng-request(a)lists.balabit.hu > > You can reach the person managing the list at > syslog-ng-owner(a)lists.balabit.hu > > When replying, please edit your Subject line so it > is more specific > than "Re: Contents of syslog-ng digest..." > > > Today's Topics: > > 1. Losing TAG information (SOLIS, ALEX) > 2. how to send alert throuth e-mail with > syslog-ng (wayne yu) > 3. RE: how to send alert throuth e-mail with > syslog-ng (SOLIS, ALEX) > 4. Re: how to send alert throuth e-mail with > syslog-ng (sawall) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 13 Jun 2006 10:07:33 -0500 > From: "SOLIS, ALEX" <asolis(a)oppd.com> > Subject: [syslog-ng] Losing TAG information > To: "Syslog-ng users' and developers' mailing list" > <syslog-ng(a)lists.balabit.hu> > Message-ID: > > <3E061654BA925846A7FAFE98BA3603B71714C401(a)SEPEX04.oppd.oppd-ds.com> > Content-Type: text/plain; charset="us-ascii" > > > I have about 20 or so AIX 4.3 servers that are > sending syslog messages > to a Linux desktop running syslog-ng 1.6.5. Every > now and then I get a > message that does not contain the TAG information or > process ID > information. When I check the local > /var/adm/messages file on the AIX > server, the TAG information is intact. > > An example of an intact message on an AIX server is: > > Jun 13 09:57:11 myhost dbc4 : 3 TRANSACT > 0 0 > 33686 57:11.60 > > > An example of the same message on my syslog server > after syslog-ng gets > a hold of it: > > Jun 13 09:57:11 myhost : 3 TRANSACT 0 > 0 33686 > 57:11.60 > > > As you can see I am losing the dbc4, why? Could it > be because of the > spaces after the dbc4 string? According to RFC > 3164, a space should > simply terminate the TAG field and begin the content > portion of the > message. Am I misunderstanding how this works? > > > Thanks > > > Alex > > > This e-mail contains Omaha Public Power District's > confidential and proprietary information and is for > use only by the intended recipient. Unless > explicitly stated otherwise, this e-mail is not a > contract offer, amendment, nor acceptance. If you > are not the intended recipient you are notified that > disclosing, copying, distributing or taking any > action in reliance on the contents of this > information is strictly prohibited. > > > > ------------------------------ > > Message: 2 > Date: Tue, 13 Jun 2006 12:19:46 -0700 (PDT) > From: wayne yu <zwyu7319(a)yahoo.com> > Subject: [syslog-ng] how to send alert throuth > e-mail with syslog-ng > To: syslog-ng(a)lists.balabit.hu > Message-ID: > <20060613191946.39833.qmail(a)web35910.mail.mud.yahoo.com> > Content-Type: text/plain; charset=iso-8859-1 > > Hi everyone: > > I like to thank those who helped me on the > syslog-ng > earlier, and my syslog-ng is finally working, > except I don't know how to send alerts from system > to > my yahoo mail. Can any one give me some hints. > > Thanks for the help. > > Wayne Yu > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam > protection around > http://mail.yahoo.com > > > ------------------------------ > > Message: 3 > Date: Tue, 13 Jun 2006 14:53:28 -0500 > From: "SOLIS, ALEX" <asolis(a)oppd.com> > Subject: RE: [syslog-ng] how to send alert throuth > e-mail with > syslog-ng > To: "Syslog-ng users' and developers' mailing list" > <syslog-ng(a)lists.balabit.hu> > Message-ID: > > <3E061654BA925846A7FAFE98BA3603B71714C508(a)SEPEX04.oppd.oppd-ds.com> > Content-Type: text/plain; charset="us-ascii" > > I use a perl script called logdog to alert on > specific syslog events. > You can find the script here: > http://caspian.dotconf.net/menu/Software/LogDog/ > > Works good for me, check it out. > > Alex > > > -----Original Message----- > From: syslog-ng-bounces(a)lists.balabit.hu > [mailto:syslog-ng-bounces@lists.balabit.hu] On > Behalf Of wayne yu > Sent: Tuesday, June 13, 2006 2:20 PM > To: syslog-ng(a)lists.balabit.hu > Subject: [syslog-ng] how to send alert throuth > e-mail with syslog-ng > > Hi everyone: > > I like to thank those who helped me on the > syslog-ng > earlier, and my syslog-ng is finally working, > except I don't know how to send alerts from system > to > my yahoo mail. Can any one give me some hints. > > Thanks for the help. > > Wayne Yu > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam > protection around > http://mail.yahoo.com > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/syslog-ng > Frequently asked questions at > http://www.campin.net/syslog-ng/faq.html > > > This e-mail contains Omaha Public Power District's > confidential and proprietary information and is for > use only by the intended recipient. Unless > explicitly stated otherwise, this e-mail is not a > contract offer, amendment, nor acceptance. If you > are not the intended recipient you are notified that > disclosing, copying, distributing or taking any > action in reliance on the contents of this > information is strictly prohibited. > > > > ------------------------------ > > === message truncated === __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

Re: syslog-ng Digest, Vol 14, Issue 9
by wayne yu 14 Jun '06

14 Jun '06

Hi Alex: The logdog works for the syslogd, does also working with syslog-ng? How do I configure it? Thanks Wayne Yu --- syslog-ng-request(a)lists.balabit.hu wrote: > Send syslog-ng mailing list submissions to > syslog-ng(a)lists.balabit.hu > > To subscribe or unsubscribe via the World Wide Web, > visit > https://lists.balabit.hu/mailman/listinfo/syslog-ng > or, via email, send a message with subject or body > 'help' to > syslog-ng-request(a)lists.balabit.hu > > You can reach the person managing the list at > syslog-ng-owner(a)lists.balabit.hu > > When replying, please edit your Subject line so it > is more specific > than "Re: Contents of syslog-ng digest..." > > > Today's Topics: > > 1. Losing TAG information (SOLIS, ALEX) > 2. how to send alert throuth e-mail with > syslog-ng (wayne yu) > 3. RE: how to send alert throuth e-mail with > syslog-ng (SOLIS, ALEX) > 4. Re: how to send alert throuth e-mail with > syslog-ng (sawall) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 13 Jun 2006 10:07:33 -0500 > From: "SOLIS, ALEX" <asolis(a)oppd.com> > Subject: [syslog-ng] Losing TAG information > To: "Syslog-ng users' and developers' mailing list" > <syslog-ng(a)lists.balabit.hu> > Message-ID: > > <3E061654BA925846A7FAFE98BA3603B71714C401(a)SEPEX04.oppd.oppd-ds.com> > Content-Type: text/plain; charset="us-ascii" > > > I have about 20 or so AIX 4.3 servers that are > sending syslog messages > to a Linux desktop running syslog-ng 1.6.5. Every > now and then I get a > message that does not contain the TAG information or > process ID > information. When I check the local > /var/adm/messages file on the AIX > server, the TAG information is intact. > > An example of an intact message on an AIX server is: > > Jun 13 09:57:11 myhost dbc4 : 3 TRANSACT > 0 0 > 33686 57:11.60 > > > An example of the same message on my syslog server > after syslog-ng gets > a hold of it: > > Jun 13 09:57:11 myhost : 3 TRANSACT 0 > 0 33686 > 57:11.60 > > > As you can see I am losing the dbc4, why? Could it > be because of the > spaces after the dbc4 string? According to RFC > 3164, a space should > simply terminate the TAG field and begin the content > portion of the > message. Am I misunderstanding how this works? > > > Thanks > > > Alex > > > This e-mail contains Omaha Public Power District's > confidential and proprietary information and is for > use only by the intended recipient. Unless > explicitly stated otherwise, this e-mail is not a > contract offer, amendment, nor acceptance. If you > are not the intended recipient you are notified that > disclosing, copying, distributing or taking any > action in reliance on the contents of this > information is strictly prohibited. > > > > ------------------------------ > > Message: 2 > Date: Tue, 13 Jun 2006 12:19:46 -0700 (PDT) > From: wayne yu <zwyu7319(a)yahoo.com> > Subject: [syslog-ng] how to send alert throuth > e-mail with syslog-ng > To: syslog-ng(a)lists.balabit.hu > Message-ID: > <20060613191946.39833.qmail(a)web35910.mail.mud.yahoo.com> > Content-Type: text/plain; charset=iso-8859-1 > > Hi everyone: > > I like to thank those who helped me on the > syslog-ng > earlier, and my syslog-ng is finally working, > except I don't know how to send alerts from system > to > my yahoo mail. Can any one give me some hints. > > Thanks for the help. > > Wayne Yu > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam > protection around > http://mail.yahoo.com > > > ------------------------------ > > Message: 3 > Date: Tue, 13 Jun 2006 14:53:28 -0500 > From: "SOLIS, ALEX" <asolis(a)oppd.com> > Subject: RE: [syslog-ng] how to send alert throuth > e-mail with > syslog-ng > To: "Syslog-ng users' and developers' mailing list" > <syslog-ng(a)lists.balabit.hu> > Message-ID: > > <3E061654BA925846A7FAFE98BA3603B71714C508(a)SEPEX04.oppd.oppd-ds.com> > Content-Type: text/plain; charset="us-ascii" > > I use a perl script called logdog to alert on > specific syslog events. > You can find the script here: > http://caspian.dotconf.net/menu/Software/LogDog/ > > Works good for me, check it out. > > Alex > > > -----Original Message----- > From: syslog-ng-bounces(a)lists.balabit.hu > [mailto:syslog-ng-bounces@lists.balabit.hu] On > Behalf Of wayne yu > Sent: Tuesday, June 13, 2006 2:20 PM > To: syslog-ng(a)lists.balabit.hu > Subject: [syslog-ng] how to send alert throuth > e-mail with syslog-ng > > Hi everyone: > > I like to thank those who helped me on the > syslog-ng > earlier, and my syslog-ng is finally working, > except I don't know how to send alerts from system > to > my yahoo mail. Can any one give me some hints. > > Thanks for the help. > > Wayne Yu > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam > protection around > http://mail.yahoo.com > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/syslog-ng > Frequently asked questions at > http://www.campin.net/syslog-ng/faq.html > > > This e-mail contains Omaha Public Power District's > confidential and proprietary information and is for > use only by the intended recipient. Unless > explicitly stated otherwise, this e-mail is not a > contract offer, amendment, nor acceptance. If you > are not the intended recipient you are notified that > disclosing, copying, distributing or taking any > action in reliance on the contents of this > information is strictly prohibited. > > > > ------------------------------ > > === message truncated === __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

RE: [syslog-ng] how to send alert throuth e-mail with syslog-ng
by SOLIS, ALEX 13 Jun '06

13 Jun '06

I use a perl script called logdog to alert on specific syslog events. You can find the script here: http://caspian.dotconf.net/menu/Software/LogDog/ Works good for me, check it out. Alex -----Original Message----- From: syslog-ng-bounces(a)lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of wayne yu Sent: Tuesday, June 13, 2006 2:20 PM To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng] how to send alert throuth e-mail with syslog-ng Hi everyone: I like to thank those who helped me on the syslog-ng earlier, and my syslog-ng is finally working, except I don't know how to send alerts from system to my yahoo mail. Can any one give me some hints. Thanks for the help. Wayne Yu __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html This e-mail contains Omaha Public Power District's confidential and proprietary information and is for use only by the intended recipient. Unless explicitly stated otherwise, this e-mail is not a contract offer, amendment, nor acceptance. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

2 1

how to send alert throuth e-mail with syslog-ng
by wayne yu 13 Jun '06

13 Jun '06

Hi everyone: I like to thank those who helped me on the syslog-ng earlier, and my syslog-ng is finally working, except I don't know how to send alerts from system to my yahoo mail. Can any one give me some hints. Thanks for the help. Wayne Yu __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

Losing TAG information
by SOLIS, ALEX 13 Jun '06

13 Jun '06

I have about 20 or so AIX 4.3 servers that are sending syslog messages to a Linux desktop running syslog-ng 1.6.5. Every now and then I get a message that does not contain the TAG information or process ID information. When I check the local /var/adm/messages file on the AIX server, the TAG information is intact. An example of an intact message on an AIX server is: Jun 13 09:57:11 myhost dbc4 : 3 TRANSACT 0 0 33686 57:11.60 An example of the same message on my syslog server after syslog-ng gets a hold of it: Jun 13 09:57:11 myhost : 3 TRANSACT 0 0 33686 57:11.60 As you can see I am losing the dbc4, why? Could it be because of the spaces after the dbc4 string? According to RFC 3164, a space should simply terminate the TAG field and begin the content portion of the message. Am I misunderstanding how this works? Thanks Alex This e-mail contains Omaha Public Power District's confidential and proprietary information and is for use only by the intended recipient. Unless explicitly stated otherwise, this e-mail is not a contract offer, amendment, nor acceptance. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

max-connections or max_connections
by Mike Jonkmans 12 Jun '06

12 Jun '06

I have noticed that 'max_connections' gets accepted by syslog-ng. But it is not working as intended. It should have a minus instead of an underscore. As it is easily overlooked, i think this is something the code should either accept or complain about. Regards, Mike Jonkmans News-Service Europe (http://www.news-service.com)

2 2

syslog-ng 1.9.11 vs RHE
by David Royer 12 Jun '06

12 Jun '06

Hi, I recently compiled syslog-ng 1.9.11, properly linked and compiled eventlog-0.2.4 and the process seems stable / properly working. Although I have seen a very weird behaviour, maybe I'm just missing something obvious (well hopefully in fact). The configuration line: filter f_filter2 { level(debug,info,notice,warning,err,crit,alert,emerg); }; works very fine, f_filter2 is used here to filter the /var/log/messages. All levels are being properly logged in the file. The configuration line: filter f_filter2 { level(debug..emerg); }; just doesn't work. I hope it's only a syntax issue, hopefully some of you encountered the problem already. Using logger I was able to test which level was logged using that config line and only these levels properly log: debug, emerg. Nothing in between. Is the (..) syntax still supported in syslog-ng 1.9+ ? Thanks in advance, -David

2 1

messages > log_msg_size result in weird behaviour
by Seb Boving 09 Jun '06

09 Jun '06

Hi, I've been troubleshooting a weird behaviour of syslog-ng (tried 1.6.4, 1.6.8 and 1.6.11) when the message is larger than the log_msg_size() (before i had actually noticed that fact). Basically, the problem can be reduced to: ---------- config: options { log_msg_size(50); }; source src { unix-stream("/dev/log"); internal(); }; destination d1 { file("/tmp/d1"); }; destination d2 { file("/tmp/d2"); }; filter f1 { facility(user) and level(warn..emerg); }; filter f2 { facility(user) and level(info..emerg); }; log { source(src); filter(f1); destination(d1); }; log { source(src); filter(f2); destination(d2); }; ----- # log a message > log_msg_size to syslog echo '1234567890123456789012345678901234567890123456789012345678901234567890' | logger -p user.err ------ /tmp/d1 logs: Jun 8 16:46:16 src@seb1 logger: 1234567890123456789012 ----- while /tmp/d2 logs: Jun 8 16:46:16 src@seb1 logger: 1234567890123456789012 Jun 8 16:46:16 src@seb1 345678901234567890123456789012345678901234567890 change f1's "warn" to info or lower and it starts showing the full message as well. change f2's "info" to warn or higher and it stops showing the full message as well. The original problem involves messages with newline, in which case the f1 filter only seems shows the first line, but that is probably irrelevant. I assume that despite the message being larger than the max allowed size, this shouldn't happen, or did i miss anything? thanks. -seb.

1 0

RE: Syslog-ng-1.9.11 for Solaris 10
by Shah, Maunir 07 Jun '06

07 Jun '06

Sorry had to repost it again, as I wasn't registered. Thanks Maunir Shah 630-285-5875 - desk 630-550-6266 - cell ________________________________ From: Shah, Maunir Sent: Wednesday, June 07, 2006 12:05 PM To: 'syslog-ng(a)lists.balabit.hu' Subject: Syslog-ng-1.9.11 for Solaris 10 We have a created a zone in Solaris 10 but I'm installing this software on the parent server or the global zone and I was able to compile libol-0.3.18 just fine. But I'm running into issues while I do a "make" for Syslog-ng-1.9.11 and attach is the error output, which I can't seem to find any solutions on the web. Any help would be appreciated.... ke-nms06:root:#make make all-recursive Making all in src if gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -I/usr/local/include/eventlog -D_GNU_SOURCE -g -O2 -Wall -g -MT misc.o -MD -MP -MF ".deps/misc.Tpo" \ -c -o misc.o `test -f 'misc.c' || echo './'`misc.c; \ then mv -f ".deps/misc.Tpo" ".deps/misc.Po"; \ else rm -f ".deps/misc.Tpo"; exit 1; \ fi if gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -I/usr/local/include/eventlog -D_GNU_SOURCE -g -O2 -Wall -g -MT utils.o -MD -MP -MF ".deps/utils.Tpo" \ -c -o utils.o `test -f 'utils.c' || echo './'`utils.c; \ then mv -f ".deps/utils.Tpo" ".deps/utils.Po"; \ else rm -f ".deps/utils.Tpo"; exit 1; \ fi --------more successful output-------------- if gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -I/usr/local/include/eventlog -D_GNU_SOURCE -g -O2 -Wall -g -MT afunix.o -MD -MP -MF ".deps/afunix.Tpo" \ -c -o afunix.o `test -f 'afunix.c' || echo './'`afunix.c; \ then mv -f ".deps/afunix.Tpo" ".deps/afunix.Po"; \ else rm -f ".deps/afunix.Tpo"; exit 1; \ fi if gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -I/usr/local/include/eventlog -D_GNU_SOURCE -g -O2 -Wall -g -MT afinet.o -MD -MP -MF ".deps/afinet.Tpo" \ -c -o afinet.o `test -f 'afinet.c' || echo './'`afinet.c; \ then mv -f ".deps/afinet.Tpo" ".deps/afinet.Po"; \ else rm -f ".deps/afinet.Tpo"; exit 1; \ fi afinet.c: In function `afinet_resolve_name': afinet.c:81: warning: implicit declaration of function `memset' afinet.c: In function `afinet_setup_socket': afinet.c:156: error: `SOL_IP' undeclared (first use in this function) afinet.c:156: error: (Each undeclared identifier is reported only once afinet.c:156: error: for each function it appears in.) afinet.c:181: error: request for member `_S6_un' in something not a structure or union afinet.c:188: error: `SOL_IPV6' undeclared (first use in this function) *** Error code 1 make: Fatal error: Command failed for target `afinet.o' Current working directory /usr/dist/syslog-ng-1.9.11/src *** Error code 1 The following command caused the error: set fnord $MAKEFLAGS; amf=$2; \ dot_seen=no; \ target=`echo all-recursive | sed s/-recursive//`; \ list='src tests doc contrib'; for subdir in $list; do \ echo "Making $target in $subdir"; \ if test "$subdir" = "."; then \ dot_seen=yes; \ local_target="$target-am"; \ else \ local_target="$target"; \ fi; \ (cd $subdir && make $local_target) \ || case "$amf" in *=*) exit 1;; *k*) fail=yes;; *) exit 1;; esac; \ done; \ if test "$dot_seen" = "no"; then \ make "$target-am" || exit 1; \ fi; test -z "$fail" make: Fatal error: Command failed for target `all-recursive' Current working directory /usr/dist/syslog-ng-1.9.11 *** Error code 1 make: Fatal error: Command failed for target `all' ke-nms06:root:# Maunir Shah 630-285-5875 - desk 630-550-6266 - cell ******************************* IMPORTANT MESSAGE ****************************** This transmission may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. ********************************************************************************

2 1