Thanks Jeff, yes that fixed it. Only problem is now I don't appear to be actually getting any logs. I get no errors, and an nmap scan of localhost does indeed show a listener on port 1028. I'll have a play about with it and email the list if I can't get it working. cheers mark www.darklogik.org On Sat, May 08, 2004 at 12:01:14AM -0400, Jeff Dell wrote:
Try removing the quotes from the ip address... Like the following:
source s_tcp { tcp(ip(127.0.0.1) port(1028) max-connections(2)); };
Jeff
-----Original Message----- From: syslog-ng-admin@lists.balabit.hu [mailto:syslog-ng-admin@lists.balabit.hu] On Behalf Of mark Sent: Friday, May 07, 2004 11:46 PM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng]Greetings, and a syntax error...
Good evening. Greetings to all users on this list, I've just signed up. Primarily I wanted syslog-ng to do secure remote logging by piping it through stunnel or ssh, but now I've had some time with the config file, I much prefer the syntax.
A problem.
I have a syntax error in my config file somewhere, and I just can't see it. syslog-ng gives the incredibly helpful:
syntax error in 3 Parse error reading configuration file, exiting. (line 3)
I've tried every variation I can think of on this line. Anyway, here is the config file:
options { sync(0); };
source src { unix-dgram("/dev/log"); internal(); owner("syslog-ng"); group("syslog-ng"); perm(0600); };
source s_tcp { tcp( port(1028) ip("127.0.0.1") max-connections(2)); };
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html