Hi folks,
I'm new to syslog-ng. I'm trying to get it running on a bunch of Ubuntu 8.04
LTS and OEL 5.3 systems.
For a start, I'm trying to get it working on 2 Ubuntu 8.04 LTS boxes.
What I want is that all logging of all systems is sent to a central loghost.
Systems do not need to keep a local logfile.
So, I've shamelesly copied over a (as said working) config from another
thread a few days ago on this list.
The client part works, at least, the reload goed ok. However, on the server,
the reload fails, giving no kind of warning or message whatsoever to hint
where the problem lies.
The configuration is as follows (With thanks to Siem Korteweg, from whom I
copied the config over).
Client & server:
source s_internal { internal(); };
destination d_syslogng_log { file("/var/log/syslog-ng.log"); };
source s_local {
unix-dgram("/dev/log");
file("/proc/kmsg" program_override("kernel:"));
};
destination d_remote { tcp("10.0.13.152" port(514) ) ; };
destination d_local { file("/var/log/messages"); };
log { source( s_internal ); destination( d_remote ); };
log { source( s_internal ); destination( d_syslogng_log ); };
log { source( s_local ); destination( d_remote ); };
log { source( s_local ); destination( d_local ); };
On the central loghost, adittional lines are added:
source s_network { tcp (ip("10.0.13.152") port(514)); };
destination d_network {
file("/var/log/syslog-ng/hosts/$HOST_FROM/$R_YEAR/$R_MONTH/$R_YEAR-$R_MONTH-$
R_DAY"
create_dirs(yes)); };
log { source( s_network ); destination( d_network ); };
But, as said, a reload fails. Can someone help me out a little ?
Oh, I am running syslog-ng 3.03, installed from the .deb package available
on the website of Balabit.
cheers and thanks in advance.
Andy