Syslog-ng has automatic demand loading so I dont know why you need it explicitly.

Sometimes we do change module names with the expectation that users wouldn't even notice.

To see what modules syslog-ng can discover, try the --module-registry option for the syslog-ng executable. It should print all of the modules we discovered.

The issue in this case seems to be that the name of the module is geoip2-plugin in contrast to geoip2 that you are using.

Hth,

Bazsi

On Tue, Apr 7, 2020, 21:49 Russell Fulton <r.fulton@auckland.ac.nz> wrote:

HI

This is a locally compiled application (version 3.26.1) and I am trying to get the geoip2 stuff working. I had similar problems a week or two back with elasticsearch_http destination plugin. This seems like it might be easier to diagnose since the error says where it is looking for the plugin.

rful011@secmgrprd02:~$ /usr/local/syslog-ng-3.26.1/sbin/syslog-ng -s -f /etc/syslog-ng/geoip.conf
[2020-04-08T07:30:19.551845] Plugin module not found in 'module-path'; module-path='/usr/local/syslog-ng-3.26.1/lib/syslog-ng', module='geoip2'
Error parsing config, syntax error, unexpected LL_ERROR, expecting $end in /etc/syslog-ng/geoip.conf:4:1-5:1:
1 @version: 3.21
2
3 @include "scl.conf"
4-----> @module geoip2
4-----> ^^^^^^^^^^^^^^^
5-----> #
6
7 options {
8 use_dns (no);
9 use_fqdn (no);

rful011@secmgrprd02:~$ ls -l /usr/local/syslog-ng-3.26.1/lib/syslog-ng/libgeoip2-plugin.*
-rwxr-xr-x 1 root root 1271 Mar 31 08:57 /usr/local/syslog-ng-3.26.1/lib/syslog-ng/libgeoip2-plugin.la
-rwxr-xr-x 1 root root 158912 Mar 31 08:57 /usr/local/syslog-ng-3.26.1/lib/syslog-ng/libgeoip2-plugin.so

any ideas why it is not loading the library?
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq