On Solaris Sparc v.10. I killed the syslog (deleted the syslog.conf file) and replaced it with syslogng 3.0.2. the aim is to have syslog-ng handle the local & remote logs.
in the mean time, for test , I have a very simple syslogng configuration file :
==
@version:3.0
source local { unix-stream("/dev/log"); internal(); };
destination all { file("/var/log/messages"); };
log { source(local); destination(all); };
==
The syslog-ng starts up as indicated below in the messages file:,
Sep 22 10:13:49 scss0004 syslog-ng[1550]: syslog-ng starting up; version='3.0.2'
Sep 22 10:13:49 scss0004 syslog-ng[1550]: Initializing destination file writer; template='/var/log/messages', filename='/var/log/messages'
-- MARK --
=
Netstat below:
netstat -a | grep syslog
*.syslog Idle
30006f653a0 stream-ord 30007183680 00000000 /usr/local/var/syslog-ng.ctl
=
I had to manually create the usr/local/var/syslog-ng.ctl before it worked.
However, I am not getting anything in my logs, even after running logger –p .
I would like know if for sure that the syslog-ng Daemon is not confused with the old syslog Daemon, & klogd, or perhaps messages are just being discarded.
Running truss shows that the sockets does indeed get created
Any idea why I all I see in the messages file is -- MARK --
thanks