Hi, On Tue, Jun 13, 2017 at 12:15:00PM +0200, Sandbox wrote:
Plugin module not found in 'module-path'; module-path='/usr/lib/syslog-ng/3.5.6', module='date-parser' Error parsing parser expression, parser plugin date-parser not found in /etc/syslog-ng/conf.d/20-haproxy.conf at line 26, column 5:
Your syslog-ng version is too old. It has been added in syslog-ng-3.8.1. If you can't upgrade, you might wanna check out the incubator which might be available for your version of syslog-ng.
It's weird, because when i try to use the date-parser module in the log section:
log { source(s_haproxy); filter(f_haproxy_info); date-parser(format("%d/%m/%Y:%H:%M:%S %z") template("$(substr ${MSG} 0 27)") ); destination(d_haproxy_info); };
it says:
Error parsing log, syntax error, unexpected LL_IDENTIFIER, expecting '}' in /etc/syslog-ng/conf.d/20-haproxy.conf at line 37, column 5:
that's perfectly normal: if you want to use inline blocks the correct syntax would be: log { ... parser { date-parser( ... ); }; ... };