- syslog-ng - lists.balabit.hu

Lost of facility/level
by Jerome Peducasse 18 Apr '02

18 Apr '02

Hi, I'm using syslog-ng 1.5.15 and sometimes (probably during message burst), messages lost their facility/level and are logged with user/notice. Message format becomes: Mar 29 11:35:50 w3search3 in void echo::AtlasClient::onRead(void *):AtlasClient.cc:427 <130>Mar 29 11:35:50 w3search[19816]: read Context failed on socket=3 in void echo::AtlasClient::onRead(void *):AtlasClient.cc:434 instead of: Mar 29 11:32:07 w3search3 w3search[19817]: read Context failed on socket=3 in void echo::AtlasClient::onRead(void *):AtlasClient.cc:434 General log_fifo_size is set to 1000 and is set to 10000 for appropriate filter of this message: destination d_applicatif { file("/ke/logs/ke.log" owner(test) group(test) log_fifo_size(10000) ); }; filter f_applicatif { facility(local0); }; log { source(s_sys); filter(f_applicatif); destination(d_applicatif); destination(d_loghost_applicatif); flags(final); }; Any Idea ? -- Jerome Peducasse

2 15

Problem compiling on Solaris 8 (sparc)
by dcntrnoc＠cmp.com 18 Apr '02

18 Apr '02

Hi all, I'm trying to compile syslog-ng version 1.5.16 with gcc version 3.0.3. Yes, libol 0.3.2 is installed. I am receiving the following error. Any help would be appreciated. . . . gcc -DHAVE_CONFIG_H -I. -I/usr/local/src/syslog-ng/syslog-ng-1.5.16/src -I. -g -O2 -Wall -I/usr/local/include/libol -D_GNU_SOURCE -c afstreams.c afstreams.c: In function `stream_read_callback': afstreams.c:148: too few arguments to function `make_log_info' make[3]: *** [afstreams.o] Error 1 make[3]: Leaving directory `/usr/local/src/syslog-ng/syslog-ng-1.5.16/src' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/local/src/syslog-ng/syslog-ng-1.5.16/src' make[1]: *** [all-recursive-am] Error 2 make[1]: Leaving directory `/usr/local/src/syslog-ng/syslog-ng-1.5.16/src' make: *** [all-recursive] Error 1 Thanks in advance, Sharon. __________________________________________________________________________________________ Any views or opinions are solely those of the author and do not necessarily represent those of CMP Media. The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. If you are not the intended recipient of this message please do not read, copy, use or disclose this communication and notify the sender immediately. It should be noted that any review, retransmission, dissemination or other use of, or taking action or reliance upon, this information by persons or entities other than the intended recipient is prohibited. __________________________________________________________________________________________

3 2

RE: [syslog-ng]Installation Error
by Tom Horan 17 Apr '02

17 Apr '02

Did you get libol and installed that first ? It should be on the download page along with syslog-ng. ./thos -----Original Message----- From: Kaan Saldiraner [mailto:kaans@steltor.com] Sent: 17 April 2002 15:19 To: syslog-ng(a)lists.balabit.hu Cc: kaans(a)steltor.com Subject: [syslog-ng]Installation Error Hello Everyone, I just tried to compile syslog-ng on a mandrake 8.2 machine and at make i get these errors.. What do you think? Thanks --------------------------- [root@superfly syslog-ng-1.4.14]# make Making all in src make[1]: Entering directory `/tmp/syslog-ng-1.4.14/src' make all-recursive make[2]: Entering directory `/tmp/syslog-ng-1.4.14/src' Making all in . make[3]: Entering directory `/tmp/syslog-ng-1.4.14/src' gcc -DHAVE_CONFIG_H -I. -I/tmp/syslog-ng-1.4.14/src -I. -O2 -Wall -I/usr /include/libol -D_GNU_SOURCE -c main.c In file included from main.c:26: syslog-ng.h:31:21: objects.h: No such file or directory In file included from cfgfile.h:29, from main.c:27: sources.h:30:23: read_line.h: No such file or directory In file included from sources.h:32, from cfgfile.h:29, from main.c:27: log.h:30:16: io.h: No such file or directory In file included from cfgfile.h:29, from main.c:27: sources.h:33:18: list.h: No such file or directory main.c:29:20: format.h: No such file or directory main.c:30:20: werror.h: No such file or directory main.c:31:19: queue.h: No such file or directory make[3]: *** [main.o] Error 1 make[3]: Leaving directory `/tmp/syslog-ng-1.4.14/src' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/tmp/syslog-ng-1.4.14/src' make[1]: *** [all-recursive-am] Error 2 make[1]: Leaving directory `/tmp/syslog-ng-1.4.14/src' make: *** [all-recursive] Error 1 Kaan Saldiraner Steltor Inc. (514)733-8500 x6503 www.steltor.com _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng ************************************************************************ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. http://www.esatbusiness.com Subscribe to the Esat Business Online Magazine: http://www.esatbusiness.com/news/subscribe.asp Subscribe to REALISE - the online magazine from BT Ignite: http://www.btignite.com/realise ************************************************************************

1 0

Installation Error
by Kaan Saldiraner 17 Apr '02

17 Apr '02

Hello Everyone, I just tried to compile syslog-ng on a mandrake 8.2 machine and at make i get these errors.. What do you think? Thanks --------------------------- [root@superfly syslog-ng-1.4.14]# make Making all in src make[1]: Entering directory `/tmp/syslog-ng-1.4.14/src' make all-recursive make[2]: Entering directory `/tmp/syslog-ng-1.4.14/src' Making all in . make[3]: Entering directory `/tmp/syslog-ng-1.4.14/src' gcc -DHAVE_CONFIG_H -I. -I/tmp/syslog-ng-1.4.14/src -I. -O2 -Wall -I/usr /include/libol -D_GNU_SOURCE -c main.c In file included from main.c:26: syslog-ng.h:31:21: objects.h: No such file or directory In file included from cfgfile.h:29, from main.c:27: sources.h:30:23: read_line.h: No such file or directory In file included from sources.h:32, from cfgfile.h:29, from main.c:27: log.h:30:16: io.h: No such file or directory In file included from cfgfile.h:29, from main.c:27: sources.h:33:18: list.h: No such file or directory main.c:29:20: format.h: No such file or directory main.c:30:20: werror.h: No such file or directory main.c:31:19: queue.h: No such file or directory make[3]: *** [main.o] Error 1 make[3]: Leaving directory `/tmp/syslog-ng-1.4.14/src' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/tmp/syslog-ng-1.4.14/src' make[1]: *** [all-recursive-am] Error 2 make[1]: Leaving directory `/tmp/syslog-ng-1.4.14/src' make: *** [all-recursive] Error 1 Kaan Saldiraner Steltor Inc. (514)733-8500 x6503 www.steltor.com

1 0

[PATCH] make log_msg_size tunable
by Balazs Scheidler 17 Apr '02

17 Apr '02

Hi, The attached patch makes the maximum length of a log message tunable as a global option. Testers welcome. Usage: options { log_msg_size(8192); }; -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1

1 1

chain_hostnames and template
by Jerome Peducasse 16 Apr '02

16 Apr '02

Hello, How can I use template and keep chain_hostname in log format ? In documentation, I don't see macro allows it. Thx. -- Jerome Peducasse

2 1

Syslog-ng Reliability
by Victor 15 Apr '02

15 Apr '02

Well, I got syslog-ng setup and running. Runs great. I have to say, this is a realy nice way of doing logging. Major kudos to developers. a few questions: 1. How reliable is network server operation of Syslog-ng under heavy load? I am running remote servers using tcp() and anticipate a lot of throughput. Will syslog-ng not drop stuff like syslogd does? 2. log_fifo_size(100) is this in bytes or kbytes or what? Is this a memory buffer before a write is done? 3. I didn't find the documentation in the man page for variables like $YEAR, $MONTH, $HOST, etc. Where is the list of these? 4. Any idea when compress(on) function will be implemented?

2 1

Installing Syslog-NG
by Victor 13 Apr '02

13 Apr '02

Hi, I have a linux system and I want to try to install Syslog-ng to stream apache logs from one box to a central box (since regular syslog is not reliable) How do I install syslog-ng on a new system? It seems to be running syslogd and klogd. Do I just shutdown syslogd only? Or both? Or does syslogd-ng run alongside the two? Could you also post an example of a config file that mimics the /var/log/maillog,kernlog, etc type of logging in a syslog-ng server config setup? Thanks for any help. P.S. Is there perhaps a howto dealing with installation of Syslog-ng on a running system? Thanks

1 0

RE: [syslog-ng]syslog-ng 1.5.16 released
by Clausing, James A (Jim), SOLCM 12 Apr '02

12 Apr '02

It was solaris 8, configure options don't really matter (in my case, I didn't use any, just ./configure), the problem is that going from 1.5.15 to 1.5.16, the make_log_info function now takes 3 arguments rather than 2 and this call only had 2. I'm using gcc-2.95.3 (same problem with 3.0.4). The compiler complained about mismatch in number of arguments. ---Jim -----Original Message----- From: Ed Ravin [mailto:eravin@panix.com] Sent: Friday, April 12, 2002 2:51 PM To: syslog-ng(a)lists.balabit.hu Subject: Re: [syslog-ng]syslog-ng 1.5.16 released "Clausing, James A (Jim), SOLCM" writes: > > syslog-ng 1.5.16 didn't build for me without the following patch. I'm not > sure what the prefix should be so I just used NULL. And what operating system and platform are you running? What were your arguments to ./configure? > --- syslog-ng-1.5.16/src/afstreams.c Sun Jul 8 17:04:21 2001 > +++ syslog-ng-1.5.16-patched/src/afstreams.c Fri Apr 12 18:09:01 2002 > @@ -145,7 +145,7 @@ > > length = eol - bol; > if (length) { > - li = make_log_info(length, bol); > + li = make_log_info(length, bol, NULL); > li->pri = pri; > HANDLE_LOG(self->pipe, li); > } _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng

1 0

RE: [syslog-ng]syslog-ng 1.5.16 released
by Clausing, James A (Jim), SOLCM 12 Apr '02

12 Apr '02

syslog-ng 1.5.16 didn't build for me without the following patch. I'm not sure what the prefix should be so I just used NULL. --- syslog-ng-1.5.16/src/afstreams.c Sun Jul 8 17:04:21 2001 +++ syslog-ng-1.5.16-patched/src/afstreams.c Fri Apr 12 18:09:01 2002 @@ -145,7 +145,7 @@ length = eol - bol; if (length) { - li = make_log_info(length, bol); + li = make_log_info(length, bol, NULL); li->pri = pri; HANDLE_LOG(self->pipe, li); } -----Original Message----- From: Balazs Scheidler [mailto:bazsi@balabit.hu] Sent: Friday, April 12, 2002 6:34 AM To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng]syslog-ng 1.5.16 released Hi, I have released syslog-ng 1.5.16 with the following NEWS entry: News for the 1.5.16 release Fri, 12 Apr 2002 09:42:28 +0200 Changes: * added log_prefix support for file sources (for adding 'kernel: ' prefix to messages from /proc/kmsg) * fixed the internal DNS cache, so now it really works * fixed localip() and localport() directives for afinet destinations (they erroneously changed the destination address) * Detect O_LARGEFILE on the system and use it if available * Never close fds 0, 1, 2 and, use /dev/null for 0 and 1, and keep 2 open for messages during reinitialization * Added UNIXTIME, R_UNIXTIME, S_UNIXTIME macros to templates and filenames * Fixed TCP wrapper support. Our webserver is currently down, but as soon as it comes back up, I'll upload this release to the usual place: http://www.balabit.hu/en/downloads/syslog-ng/ -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng

2 2