Re: [syslog-ng] Error binding socket;

14 May 2018


      Hi Gergely,
My configuration my of both client and server side.
...
...
...
...
...
...
>>>>>>>>>>>>>>>>>>>>>>client confg<<<<<<<<<<<<<<<<<<<<<<<<<<<
@version:3.13
@include "scl.conf"
@define allow-config-dups 1
#options {
#    flush_lines (0);
#    time_reopen (10);
#    log_fifo_size (1000);
#    chain_hostnames (off);
#    use_dns (no);
#    use_fqdn (no);
#    create_dirs (no);
#    keep_hostname (yes);
#};

source s_local {
    system();
    internal();

};
destination d_network {udp("192.168.122.67" port(514));

};

destination d_local {
            file("/var/log/messages");
};

log{
   source(s_local);
   destination(d_network);
   destination(d_local);

};

source s_local{
          wildcard-file(
          base-dir("/usr/local/apache/logs")
          filename-pattern("*.log")
          recursive(no)
          follow-freq(1));
};

destination d_network {tcp("192.168.122.67" port(514));

};

log{
   source(s_local);
   destination(d_network);

};
...
...
...
...
...
...
>>>>>>>>>>>>>>>>>>>>>>>server side
cong<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
@version:3.13
@include "scl.conf"
source s_local{system(); internal();};
source s_network{

         udp();
         tcp();

};

destination d_local{file("/var/log/messages");};
destination d_from_net{file("/var/log/from_net");};
log{
   source(s_local);
   destination(d_local);
};
log { source(s_network); destination(d_from_net); };


source s_net {
  network(flags(no-parse));
};

parser p_apache {
  csv-parser(
    columns("apache.FILE_NAME", "apache.MESSAGE")
    flags(greedy)
  );
};
destination d_apache {
  file("/usr/local/apache/logs/${apache.FILE_NAME}"
       template("${apache.MESSAGE}\n"));
};

log{
   source (s_net);
   parser (p_apache);
   destination(d_apache);
};


*Thanks & Regards :-*

*VINOD SINGH SAUD*

*(M):- 09718663552*

*(W):-09997645597*

*(E) :- vinod.samant.123@gmail.com <vinod.samant.123@gmail.com>*

On Mon, May 14, 2018 at 5:30 PM, Gergely Nagy <algernon@balabit.com> wrote:
...
...
...
...
...
...
"vinod" == vinod samant <vinod.samant.123@gmail.com> writes:
vinod> When  i am going to comment those lines on server side
,syslog-ng is
    vinod> working fine ,But all logs are coming in one file
    vinod> */var/log/from_net .*
Can you show us your *full* configuration, including any included config
files? In the samples I showed, there is no `/var/log/from_net`, so my
suspicion is that some other part of your configuration sets up a
similar source, and a logpath that routes those logs elsewhere.
vinod> *Is it necessary to define port in server side configuration
    vinod> file also?*
No, it has a default port, and the client side will use the same default
port when no port is specified. But if you do specify a different port
on either side, the other one will have to be adapted too.
vinod> *Can you share  wildcard configuration for both server side and
cilent
    vinod> side?*
I did, a few messages ago.
--
|8]