[syslog-ng] tcp centralized setup

11 Jul 2007

      I had my sys admin install syslog-ng for me, because I can't have root
access. I wish to set up a syslog-ng listener to collect syslog (TCP)
messages from cisco routers. I need the existing solaris 9 syslog
daemon (UDP 514) to remain running. I used a basic conf file

options {
        long_hostnames(on);sync(0);stats(43200);dns_cache(yes);
        use_fqdn(no);keep_hostname(yes);use_dns(yes);
};

source tcpgateway {
        unix-stream("/dev/log");
        internal();
        tcp(ip(0.0.0.0) port(514) max_connections(1000));
};

destination tcplocalhost {
        file("/var/tmp/syslog-ng.all");
};

log {
        source(tcpgateway); destination(tcplocalhost);
};

I tried to start the syslog-ng daemon and got this error
'io.c: bind_unix_socket(): /dev/log not a socket'

the ls -l of /dev/log shows       /devices/pseudo/log@0:log

Is this because I am not running syslog-ng as root ?  What am I doing wrong ?

Thanks

[syslog-ng] tcp centralized setup

Blurry