The second instance youre trying to launch is using the first instance's config. Error initializing source driver; source='src', id='src#0' From that message you can see its trying to initialize the source callced 'src'. In your second config, your source is called 's_node', the first instance is called 'src'. Make sure youre passing the proper '-f' option to syslog-ng when you start it. Sent: Saturday, June 26, 2010 8:18:22 PM From: John R. Dunning <jrd@jrd.org> To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: [syslog-ng] ***SPAM*** Re: Two instances of syslog-ng on the same host?
From: "Patrick H." <syslogng@feystorm.net> Date: Sat, 26 Jun 2010 19:33:10 -0600
Yes, that should work just fine.
Well, ok, then I'm dense.
Here's the config for the proxy:
---------------------------------------------------------------- # $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo,v 1.5 2005/05/12 05:46:10 mr_bones_ Exp $ # # Syslog-ng default configuration file for Gentoo Linux # contributed by Michael Sterrett
# added by jrd 6/24/10 @version: 3.0
options { chain_hostnames(no); keep_hostname(yes);
log_fifo_size(40000); flush_lines(10000);
stats_freq(43200); # Stats message every 12 hours };
source s_node { tcp(max-connections(1000) port(1514) ); };
#source ignore #{ # internal(); #};
destination ssp { tcp ("ssp" port(1514)); };
log { source(s_node); destination(ssp); }; ----------------------------------------------------------------
and here's the config for the main instance:
----------------------------------------------------------------
@version: 3.0 # $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo.3,v 1.1 2010/04/06 02:11:35 mr_bones_ Exp $ # # Syslog-ng default configuration file for Gentoo Linux
options { chain_hostnames(no);
# The default action of syslog-ng is to log a STATS line # to the file every 10 minutes. That's pretty ugly after a while. # Change it to every 12 hours so you get a nice daily update of # how many messages syslog-ng missed (0). stats_freq(43200); };
source src { unix-stream("/dev/log" max-connections(256)); internal(); file("/proc/kmsg"); };
destination messages { file("/var/log/messages"); };
# By default messages are logged to tty12... destination console_all { file("/dev/tty12"); }; # ...if you intend to use /dev/console for programs like xconsole # you can comment out the destination line above that references /dev/tty12 # and uncomment the line below. #destination console_all { file("/dev/console"); };
log { source(src); destination(messages); }; log { source(src); destination(console_all); }; ----------------------------------------------------------------
When I launch the second instance I still get
* Starting syslog-ng ...Error binding socket; addr='AF_UNIX(/dev/log)', error='Address already in use (125)' Error initializing source driver; source='src', id='src#0' Error initializing message pipeline;
* Failed to start syslog-ng
This is gentoo, btw.
Further hints? Thanks in advance.... ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html