Hello list. I'm the mandriva maintainer for syslog-ng. I'm trying to play with the pattern database, with syslog-ng 3.0.4. I rebuild the package with the attached patch, so as to use /usr/share/syslog-ng a database location (a bit more FHS-compliant than /var), and extracted the files downloaded from http://www.balabit.com/downloads/files/patterndb there. However, loading them fails with this message: Error parsing pattern database file; filename='/usr/share/syslog-ng/patterndb.xml', error='Unexpected <rule> element' Error reloading pattern database, no pattern recognition will be done; It looks like some DB format issue. According to http://www.balabit.com/dl/html/syslog-ng-v3.0-guide-admin-en.html/ch08s06.ht... the supported format is v1 until syslog-ng 3.0.2, and the NEWS file doesn't list any change here, while the patterndb file is already using v2. Am I correct ? And in this case, is there any way to easily convert the base to the old format ? -- BOFH excuse #252: Our ISP is having {switching,routing,SMDS,frame relay} problems diff -Naur -x '*~' syslog-ng-3.0.4/configure.in syslog-ng-3.0.4-fix-pattern-database-location/configure.in --- syslog-ng-3.0.4/configure.in 2009-04-30 18:32:19.000000000 +0200 +++ syslog-ng-3.0.4-fix-pattern-database-location/configure.in 2009-10-12 15:20:11.000000000 +0200 @@ -722,6 +722,7 @@ AC_DEFINE_UNQUOTED(PATH_SYSCONFDIR, "`patheval $sysconfdir`", [sysconfdir]) AC_DEFINE_UNQUOTED(PATH_LOCALSTATEDIR, "`patheval $localstatedir`", [local state directory]) AC_DEFINE_UNQUOTED(PATH_PIDFILEDIR, "`patheval $pidfiledir`", [local state directory]) +AC_DEFINE_UNQUOTED(PATH_DATADIR, "`patheval $datadir`", [datadir]) if test -n "$timezonedir"; then AC_DEFINE_UNQUOTED(PATH_TIMEZONEDIR, "`patheval $timezonedir`", [timezone base directory]) fi diff -Naur -x '*~' syslog-ng-3.0.4/src/syslog-ng.h syslog-ng-3.0.4-fix-pattern-database-location/src/syslog-ng.h --- syslog-ng-3.0.4/src/syslog-ng.h 2009-04-22 13:06:57.000000000 +0200 +++ syslog-ng-3.0.4-fix-pattern-database-location/src/syslog-ng.h 2009-10-12 15:14:10.000000000 +0200 @@ -52,7 +52,7 @@ #define PATH_PERSIST_CONFIG PATH_LOCALSTATEDIR "/syslog-ng.persist" #define PATH_QDISK PATH_LOCALSTATEDIR -#define PATH_PATTERNDB_FILE PATH_LOCALSTATEDIR "/patterndb.xml" +#define PATH_PATTERNDB_FILE PATH_DATADIR "/syslog-ng/patterndb.xml" #define LOG_PRIORITY_LISTEN 0 #define LOG_PRIORITY_READER 0