Try this (from our kickstart script at http://logzilla.sh) # Syslog-ng Repo: source /etc/lsb-release grep -q "deb http://download.opensuse.org/repositories/home:/laszlo_budai:/syslog-ng/xUbuntu_${DISTRIB_RELEASE} ./" \ /etc/apt/sources.list /etc/apt/sources.list.d/*.list || \ echo "deb http://download.opensuse.org/repositories/home:/laszlo_budai:/syslog-ng/xUbuntu_${DISTRIB_RELEASE} ./" \ > /etc/apt/sources.list.d/syslog-ng.list apt-key list | grep -q laszlo_budai:syslog-ng || wget -qO- \ "http://download.opensuse.org/repositories/home:/laszlo_budai:/syslog-ng/xUbuntu_${DISTRIB_RELEASE}/Release.key" | \ sudo apt-key add - >/dev/null apt update apt install syslog-ng From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Simon Mousey Smith <simonsmith5521@gmail.com> Reply-To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Date: Tuesday, November 8, 2016 at 7:10 AM To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: Re: [syslog-ng] unable to install syslog-ng ubuntu 16.04 Hi, Im still no luck either :( Tried assorts but no luck regards Simon On 8 Nov 2016, at 12:10, Varugis Kurien <vkurien@midfinsystems.com<mailto:vkurien@midfinsystems.com>> wrote: Hi Laszlo, Have you been able to get this to work? I am in exactly the same position as Simon - I need the ability to parse Linux audit logs in syslog-ng. ________________________________ From: syslog-ng <syslog-ng-bounces@lists.balabit.hu<mailto:syslog-ng-bounces@lists.balabit.hu>> on behalf of Laszlo Budai <laszlo.budai@outlook.com<mailto:laszlo.budai@outlook.com>> Sent: Saturday, November 5, 2016 1:59:09 PM To: Syslog-ng users' and developers' mailing list Subject: Re: [syslog-ng] unable to install syslog-ng ubuntu 16.04 Hi, in docker it is not working... I'll try to fix this issue. regards, Laszlo Budai _____________________________ From: Scheidler, Balázs <balazs.scheidler@balabit.com<mailto:balazs.scheidler@balabit.com>> Sent: Saturday, November 5, 2016 9:21 AM Subject: Re: [syslog-ng] unable to install syslog-ng ubuntu 16.04n To: László Budai <lbudai@balabit.hu<mailto:lbudai@balabit.hu>>, Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu<mailto:syslog-ng@lists.balabit.hu>> Indeed, I think the problem is that syslog-ng core depends on syslog-ng-mod-journal, which recursively depends on syslog-ng-core through a Provides line. Hmm.. the funny part that a week ago I successfully installed the same package on one of my servers, but now in a clean docker container I couldn't do that. I have a workaround, attached you'll find an equivs compatible control file, that provides the missing dependency, once that is installed, "apt-get install syslog-ng" works. It goes like this: # dpkg -i syslog-ng-abi-3.8-0_3.8.1-1_all.deb Selecting previously unselected package syslog-ng-abi-3.8-0. (Reading database ... 7256 files and directories currently installed.) Preparing to unpack syslog-ng-abi-3.8-0_3.8.1-1_all.deb ... Unpacking syslog-ng-abi-3.8-0 (3.8.1-1) ... Setting up syslog-ng-abi-3.8-0 (3.8.1-1) ... # apt-get install syslog-ng-core Reading package lists... Done Building dependency tree Reading state information... Done The following additional packages will be installed: cron libevtlog0 libffi6 libglib2.0-0 libglib2.0-data libicu55 libivykis0 libnet1 libpopt0 libssl1.0.0 libwrap0 libxml2 logrotate sgml-base shared-mime-info syslog-ng-mod-journal tcpd xdg-user-dirs xml-core Suggested packages: anacron checksecurity exim4 | postfix | mail-transport-agent mailx sgml-base-doc syslog-ng-mod-sql syslog-ng-mod-mongodb syslog-ng-mod-json syslog-ng-mod-smtp syslog-ng-mod-amqp syslog-ng-mod-geoip syslog-ng-mod-redis syslog-ng-mod-stomp syslog-ng-mod-riemann syslog-ng-mod-graphite syslog-ng-mod-python syslog-ng-mod-java syslog-ng-mod-java-common-lib syslog-ng-mod-elastic syslog-ng-mod-hdfs syslog-ng-mod-kafka syslog-ng-mod-http syslog-ng-mod-curl syslog-ng-mod-kvformat syslog-ng-mod-add-contextual-data debhelper The following NEW packages will be installed: cron libevtlog0 libffi6 libglib2.0-0 libglib2.0-data libicu55 libivykis0 libnet1 libpopt0 libssl1.0.0 libwrap0 libxml2 logrotate sgml-base shared-mime-info syslog-ng-core syslog-ng-mod-journal tcpd xdg-user-dirs xml-core 0 upgraded, 20 newly installed, 0 to remove and 11 not upgraded. Need to get 11.9 MB of archives. After this operation, 49.5 MB of additional disk space will be used. Do you want to continue? [Y/n] The "syslog-ng-core" package only contains a subset of the syslog-ng package, pulling in a smaller set of dependencies, whereas syslog-ng is the full set. The abi package here is just a fake one, I'll make sure this packaging issue gets fixed. -- Bazsi On Thu, Nov 3, 2016 at 10:25 PM, Simon Smith <simonsmith5521@gmail.com<mailto:simonsmith5521@gmail.com>> wrote: Hi All has anyone been able to install syslog-ng 3.8 successfully on ubuntu 16.04 ? I’m using the link from the mailing list a few months ago but again no luck - http://lists.balabit.hu/pipermail/syslog-ng/2016-August/023150.html no matter what packages i try to install it just won’t work any ideas? root@syslog:~# apt-get install syslog-ng Reading package lists... Done Building dependency tree Reading state information... Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: syslog-ng : Depends: syslog-ng-core (>= 3.8.1) but it is not going to be installed Depends: syslog-ng-mod-sql but it is not going to be installed Depends: syslog-ng-mod-mongodb but it is not going to be installed Depends: syslog-ng-mod-json but it is not going to be installed Recommends: syslog-ng-mod-journal but it is not going to be installed Recommends: syslog-ng-mod-smtp but it is not going to be installed Recommends: syslog-ng-mod-amqp but it is not going to be installed Recommends: syslog-ng-mod-geoip but it is not going to be installed Recommends: syslog-ng-mod-redis but it is not going to be installed Recommends: syslog-ng-mod-stomp but it is not going to be installed Recommends: syslog-ng-mod-riemann but it is not going to be installed Recommends: syslog-ng-mod-graphite but it is not going to be installed Recommends: syslog-ng-mod-python but it is not going to be installed Recommends: syslog-ng-mod-java but it is not going to be installed Recommends: syslog-ng-mod-java-common-lib but it is not going to be installed Recommends: syslog-ng-mod-elastic but it is not going to be installed Recommends: syslog-ng-mod-hdfs but it is not going to be installed Recommends: syslog-ng-mod-kafka but it is not going to be installed Recommends: syslog-ng-mod-http but it is not going to be installed Recommends: syslog-ng-mod-curl but it is not going to be installed Recommends: syslog-ng-mod-kvformat but it is not going to be installed Recommends: syslog-ng-mod-add-contextual-data but it is not going to be installed E: Unable to correct problems, you have held broken packages. root@syslog:~# apt-get install syslog-ng-core Reading package lists... Done Building dependency tree Reading state information... Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: syslog-ng-core : Depends: syslog-ng-mod-journal but it is not going to be installed E: Unable to correct problems, you have held broken packages. root@syslog:~# apt-get install syslog-ng-mod-journal Reading package lists... Done Building dependency tree Reading state information... Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: syslog-ng-mod-journal : Depends: syslog-ng-abi-3.8-0 but it is not installable E: Unable to correct problems, you have held broken packages. root@syslog:~# apt-get install syslog-ng syslog-ng-core syslog-ng-mod-sql syslog-ng-mod-mongodb syslog-ng-mod-json syslog-ng-mod-journal Reading package lists... Done Building dependency tree Reading state information... Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: syslog-ng-mod-journal : Depends: syslog-ng-abi-3.8-0 but it is not installable syslog-ng-mod-json : Depends: syslog-ng-abi-3.8-0 but it is not installable syslog-ng-mod-mongodb : Depends: syslog-ng-abi-3.8-0 but it is not installable syslog-ng-mod-sql : Depends: syslog-ng-abi-3.8-0 but it is not installable E: Unable to correct problems, you have held broken packages. root@syslog:~# regards Simon - Hestor Ltd ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq