----- Original message -----
James McDonald <jmcdonald@LCE.com> writes:
We are using version 4.0.1a. I am using 'service syslog-ng restart.' Below is the output I get from running that command:
Ah, if it is PE, then I'd suggest you contact us via BOSS. This list is for the OpenSource Edition of syslog-ng.
Nevertheless:
[root@server-name ~]# service syslog-ng restart WARNING: Configuration file format is too old, please update it to use the 4.1 format as some constructs might operate inefficiently; WARNING: global: the default value of log_fifo_size() has changed to 10000 in syslog-ng 4.1 to reflect log_iw_size() changes for tcp()/udp() window size changes; Error resolving user; user='root' Error resolving group; group='root'
This suggests that syslog-ng can't figure out what uid the root user has. This usually means that /etc/passwd is borked, or Name Server Switch functionality (see /etc/nsswitch.conf) is somehow not working.
also, the logs indicate that it is v4.1 and not v4.0 and v4.1 should be upgraded as that is a feature release with short term support periods, v4.2 superseeded it (after 3 months past the release date) but anyway the support guys should be helpful to resolve this issue.