Thank you James. This is what I get from and it seems good but I can't get to start... [root@slc ~]# sudo syslog-ng -Fvd [2017-01-09T15:51:50.709879] Starting to read include file; filename='/usr/local/etc/scl.conf', depth='1' [2017-01-09T15:51:50.709971] Global value changed; define='scl-root', value='/usr/local/share/include/scl' [2017-01-09T15:51:50.709989] Global value changed; define='include-path', value='/usr/local/etc:/usr/local/share/include' [2017-01-09T15:51:50.710098] Adding include file; filename='/usr/local/share/include/scl/graphite/plugin.conf' [2017-01-09T15:51:50.710104] Adding include file; filename='/usr/local/share/include/scl/nodejs/plugin.conf' [2017-01-09T15:51:50.710107] Adding include file; filename='/usr/local/share/include/scl/pacct/plugin.conf' [2017-01-09T15:51:50.710110] Adding include file; filename='/usr/local/share/include/scl/rewrite/cc-mask.conf' [2017-01-09T15:51:50.710112] Adding include file; filename='/usr/local/share/include/scl/syslogconf/plugin.conf' [2017-01-09T15:51:50.710116] Adding include file; filename='/usr/local/share/include/scl/system/plugin.conf' [2017-01-09T15:51:50.710123] Starting to read include file; filename='/usr/local/share/include/scl/graphite/plugin.conf', depth='2' [2017-01-09T15:51:50.710181] Reading path for candidate modules; path='/usr/local/lib/syslog-ng' [2017-01-09T15:51:50.710217] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='linux-kmsg-format.so', module='linux-kmsg-format' [2017-01-09T15:51:50.710357] Registering candidate plugin; module='linux-kmsg-format', context='format', name='linux-kmsg', preference='0' [2017-01-09T15:51:50.710381] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='sdjournal.so', module='sdjournal' [2017-01-09T15:51:50.710497] Registering candidate plugin; module='sdjournal', context='source', name='systemd-journal', preference='0' [2017-01-09T15:51:50.710571] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='afsocket-notls.so', module='afsocket-notls' [2017-01-09T15:51:50.710674] Registering candidate plugin; module='afsocket-notls', context='source', name='unix-stream', preference='0' [2017-01-09T15:51:50.710682] Registering candidate plugin; module='afsocket-notls', context='destination', name='unix-stream', preference='0' [2017-01-09T15:51:50.710686] Registering candidate plugin; module='afsocket-notls', context='source', name='unix-dgram', preference='0' [2017-01-09T15:51:50.710690] Registering candidate plugin; module='afsocket-notls', context='destination', name='unix-dgram', preference='0' [2017-01-09T15:51:50.710694] Registering candidate plugin; module='afsocket-notls', context='source', name='tcp', preference='0' [2017-01-09T15:51:50.710697] Registering candidate plugin; module='afsocket-notls', context='destination', name='tcp', preference='0' [2017-01-09T15:51:50.710702] Registering candidate plugin; module='afsocket-notls', context='source', name='tcp6', preference='0' [2017-01-09T15:51:50.710706] Registering candidate plugin; module='afsocket-notls', context='destination', name='tcp6', preference='0' [2017-01-09T15:51:50.710710] Registering candidate plugin; module='afsocket-notls', context='source', name='udp', preference='0' [2017-01-09T15:51:50.710714] Registering candidate plugin; module='afsocket-notls', context='destination', name='udp', preference='0' [2017-01-09T15:51:50.710718] Registering candidate plugin; module='afsocket-notls', context='source', name='udp6', preference='0' [2017-01-09T15:51:50.710722] Registering candidate plugin; module='afsocket-notls', context='destination', name='udp6', preference='0' [2017-01-09T15:51:50.710726] Registering candidate plugin; module='afsocket-notls', context='source', name='syslog', preference='0' [2017-01-09T15:51:50.710730] Registering candidate plugin; module='afsocket-notls', context='destination', name='syslog', preference='0' [2017-01-09T15:51:50.710735] Registering candidate plugin; module='afsocket-notls', context='source', name='network', preference='0' [2017-01-09T15:51:50.710751] Registering candidate plugin; module='afsocket-notls', context='destination', name='network', preference='0' [2017-01-09T15:51:50.710754] Registering candidate plugin; module='afsocket-notls', context='source', name='systemd-syslog', preference='0' [2017-01-09T15:51:50.710784] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='afstomp.so', module='afstomp' [2017-01-09T15:51:50.710863] Registering candidate plugin; module='afstomp', context='destination', name='stomp', preference='0' [2017-01-09T15:51:50.710883] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='afmongodb.so', module='afmongodb' [2017-01-09T15:51:50.711020] Registering candidate plugin; module='afmongodb', context='destination', name='mongodb', preference='0' [2017-01-09T15:51:50.711073] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='graphite.so', module='graphite' [2017-01-09T15:51:50.711160] Registering candidate plugin; module='graphite', context='template-func', name='graphite_output', preference='0' [2017-01-09T15:51:50.711177] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='basicfuncs.so', module='basicfuncs' [2017-01-09T15:51:50.711255] Registering candidate plugin; module='basicfuncs', context='template-func', name='grep', preference='0' [2017-01-09T15:51:50.711262] Registering candidate plugin; module='basicfuncs', context='template-func', name='if', preference='0' [2017-01-09T15:51:50.711266] Registering candidate plugin; module='basicfuncs', context='template-func', name='or', preference='0' [2017-01-09T15:51:50.711269] Registering candidate plugin; module='basicfuncs', context='template-func', name='echo', preference='0' [2017-01-09T15:51:50.711273] Registering candidate plugin; module='basicfuncs', context='template-func', name='length', preference='0' [2017-01-09T15:51:50.711276] Registering candidate plugin; module='basicfuncs', context='template-func', name='substr', preference='0' [2017-01-09T15:51:50.711280] Registering candidate plugin; module='basicfuncs', context='template-func', name='strip', preference='0' [2017-01-09T15:51:50.711283] Registering candidate plugin; module='basicfuncs', context='template-func', name='sanitize', preference='0' [2017-01-09T15:51:50.711287] Registering candidate plugin; module='basicfuncs', context='template-func', name='lowercase', preference='0' [2017-01-09T15:51:50.711290] Registering candidate plugin; module='basicfuncs', context='template-func', name='uppercase', preference='0' [2017-01-09T15:51:50.711293] Registering candidate plugin; module='basicfuncs', context='template-func', name='replace-delimiter', preference='0' [2017-01-09T15:51:50.711297] Registering candidate plugin; module='basicfuncs', context='template-func', name='padding', preference='0' [2017-01-09T15:51:50.711300] Registering candidate plugin; module='basicfuncs', context='template-func', name='+', preference='0' [2017-01-09T15:51:50.711304] Registering candidate plugin; module='basicfuncs', context='template-func', name='-', preference='0' [2017-01-09T15:51:50.711307] Registering candidate plugin; module='basicfuncs', context='template-func', name='*', preference='0' [2017-01-09T15:51:50.711310] Registering candidate plugin; module='basicfuncs', context='template-func', name='/', preference='0' [2017-01-09T15:51:50.711313] Registering candidate plugin; module='basicfuncs', context='template-func', name='%', preference='0' [2017-01-09T15:51:50.711317] Registering candidate plugin; module='basicfuncs', context='template-func', name='ipv4-to-int', preference='0' [2017-01-09T15:51:50.711325] Registering candidate plugin; module='basicfuncs', context='template-func', name='indent-multi-line', preference='0' [2017-01-09T15:51:50.711328] Registering candidate plugin; module='basicfuncs', context='template-func', name='context-length', preference='0' [2017-01-09T15:51:50.711344] Registering candidate plugin; module='basicfuncs', context='template-func', name='env', preference='0' [2017-01-09T15:51:50.711359] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='dbparser.so', module='dbparser' [2017-01-09T15:51:50.711497] Registering candidate plugin; module='dbparser', context='parser', name='db-parser', preference='0' [2017-01-09T15:51:50.711663] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='system-source.so', module='system-source' [2017-01-09T15:51:50.711745] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='afuser.so', module='afuser' [2017-01-09T15:51:50.711816] Registering candidate plugin; module='afuser', context='destination', name='usertty', preference='0' [2017-01-09T15:51:50.711836] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='cryptofuncs.so', module='cryptofuncs' [2017-01-09T15:51:50.711918] Registering candidate plugin; module='cryptofuncs', context='template-func', name='uuid', preference='0' [2017-01-09T15:51:50.711939] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='pseudofile.so', module='pseudofile' [2017-01-09T15:51:50.712028] Registering candidate plugin; module='pseudofile', context='destination', name='pseudofile', preference='0' [2017-01-09T15:51:50.712057] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='syslog-ng-crypto.so', module='syslog-ng-crypto' [2017-01-09T15:51:50.712114] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='affile.so', module='affile' [2017-01-09T15:51:50.712211] Registering candidate plugin; module='affile', context='source', name='file', preference='0' [2017-01-09T15:51:50.712219] Registering candidate plugin; module='affile', context='source', name='pipe', preference='0' [2017-01-09T15:51:50.712223] Registering candidate plugin; module='affile', context='destination', name='file', preference='0' [2017-01-09T15:51:50.712226] Registering candidate plugin; module='affile', context='destination', name='pipe', preference='0' [2017-01-09T15:51:50.712244] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='afprog.so', module='afprog' [2017-01-09T15:51:50.712313] Registering candidate plugin; module='afprog', context='source', name='program', preference='0' [2017-01-09T15:51:50.712320] Registering candidate plugin; module='afprog', context='destination', name='program', preference='0' [2017-01-09T15:51:50.712334] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='syslogformat.so', module='syslogformat' [2017-01-09T15:51:50.712401] Registering candidate plugin; module='syslogformat', context='format', name='syslog', preference='0' [2017-01-09T15:51:50.712409] Registering candidate plugin; module='syslogformat', context='parser', name='syslog-parser', preference='0' [2017-01-09T15:51:50.712423] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='afamqp.so', module='afamqp' [2017-01-09T15:51:50.712495] Registering candidate plugin; module='afamqp', context='destination', name='amqp', preference='0' [2017-01-09T15:51:50.712513] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='afsocket.so', module='afsocket' [2017-01-09T15:51:50.712614] Registering candidate plugin; module='afsocket', context='source', name='unix-stream', preference='0' [2017-01-09T15:51:50.712621] Registering candidate plugin; module='afsocket', context='destination', name='unix-stream', preference='0' [2017-01-09T15:51:50.712625] Registering candidate plugin; module='afsocket', context='source', name='unix-dgram', preference='0' [2017-01-09T15:51:50.712628] Registering candidate plugin; module='afsocket', context='destination', name='unix-dgram', preference='0' [2017-01-09T15:51:50.712631] Registering candidate plugin; module='afsocket', context='source', name='tcp', preference='0' [2017-01-09T15:51:50.712634] Registering candidate plugin; module='afsocket', context='destination', name='tcp', preference='0' [2017-01-09T15:51:50.712638] Registering candidate plugin; module='afsocket', context='source', name='tcp6', preference='0' [2017-01-09T15:51:50.712641] Registering candidate plugin; module='afsocket', context='destination', name='tcp6', preference='0' [2017-01-09T15:51:50.712644] Registering candidate plugin; module='afsocket', context='source', name='udp', preference='0' [2017-01-09T15:51:50.712647] Registering candidate plugin; module='afsocket', context='destination', name='udp', preference='0' [2017-01-09T15:51:50.712650] Registering candidate plugin; module='afsocket', context='source', name='udp6', preference='0' [2017-01-09T15:51:50.712653] Registering candidate plugin; module='afsocket', context='destination', name='udp6', preference='0' [2017-01-09T15:51:50.712656] Registering candidate plugin; module='afsocket', context='source', name='syslog', preference='0' [2017-01-09T15:51:50.712659] Registering candidate plugin; module='afsocket', context='destination', name='syslog', preference='0' [2017-01-09T15:51:50.712662] Registering candidate plugin; module='afsocket', context='source', name='network', preference='0' [2017-01-09T15:51:50.712665] Registering candidate plugin; module='afsocket', context='destination', name='network', preference='0' [2017-01-09T15:51:50.712696] Registering candidate plugin; module='afsocket', context='source', name='systemd-syslog', preference='0' [2017-01-09T15:51:50.712715] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='confgen.so', module='confgen' [2017-01-09T15:51:50.712784] Reading shared object for a candidate module; path='/usr/local/lib/syslog-ng', fname='csvparser.so', module='csvparser' [2017-01-09T15:51:50.712848] Registering candidate plugin; module='csvparser', context='parser', name='csv-parser', preference='0' [2017-01-09T15:51:50.712907] Finishing include; filename='/usr/local/share/include/scl/graphite/plugin.conf', depth='2' [2017-01-09T15:51:50.712924] Starting to read include file; filename='/usr/local/share/include/scl/nodejs/plugin.conf', depth='2' [2017-01-09T15:51:50.713000] Finishing include; filename='/usr/local/share/include/scl/nodejs/plugin.conf', depth='2' [2017-01-09T15:51:50.713014] Starting to read include file; filename='/usr/local/share/include/scl/pacct/plugin.conf', depth='2' [2017-01-09T15:51:50.713063] Finishing include; filename='/usr/local/share/include/scl/pacct/plugin.conf', depth='2' [2017-01-09T15:51:50.713076] Starting to read include file; filename='/usr/local/share/include/scl/rewrite/cc-mask.conf', depth='2' [2017-01-09T15:51:50.713128] Global value changed; define='balabit.credit-card-regexp', value='(?P<1>:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})' [2017-01-09T15:51:50.713161] Finishing include; filename='/usr/local/share/include/scl/rewrite/cc-mask.conf', depth='2' [2017-01-09T15:51:50.713173] Starting to read include file; filename='/usr/local/share/include/scl/syslogconf/plugin.conf', depth='2' [2017-01-09T15:51:50.713302] Module loaded and initialized successfully; module='confgen' [2017-01-09T15:51:50.713313] Finishing include; filename='/usr/local/share/include/scl/syslogconf/plugin.conf', depth='2' [2017-01-09T15:51:50.713328] Starting to read include file; filename='/usr/local/share/include/scl/system/plugin.conf', depth='2' [2017-01-09T15:51:50.713463] Module loaded and initialized successfully; module='system-source' [2017-01-09T15:51:50.713474] Finishing include; filename='/usr/local/share/include/scl/system/plugin.conf', depth='2' [2017-01-09T15:51:50.713486] Finishing include; filename='/usr/local/etc/scl.conf', depth='1' [2017-01-09T15:51:50.713607] system(): json-parser() is missing, skipping the automatic JSON parsing of messages submitted via syslog(3), Please install the json module; [2017-01-09T15:51:50.713751] Module loaded and initialized successfully; module='afsocket-notls' [2017-01-09T15:51:50.713967] Module loaded and initialized successfully; module='affile' [2017-01-09T15:51:50.714034] Finishing include; content='source confgen system', depth='1' [2017-01-09T15:51:50.714242] Compiling #unnamed sequence [log] at [/usr/local/etc/syslog-ng.conf:23:2] [2017-01-09T15:51:50.714248] Compiling s_local reference [source] at [/usr/local/etc/syslog-ng.conf:23:2] [2017-01-09T15:51:50.714252] Compiling s_local sequence [source] at [/usr/local/etc/syslog-ng.conf:9:1] [2017-01-09T15:51:50.714255] Compiling #unnamed junction [log] at [/usr/local/etc/syslog-ng.conf:9:17] [2017-01-09T15:51:50.714257] Compiling #unnamed sequence [log] at [source confgen system:2:5] [2017-01-09T15:51:50.714260] Compiling #unnamed sequence [source] at [source confgen system:2:5] [2017-01-09T15:51:50.714262] Compiling #unnamed junction [log] at [source confgen system:2:13] [2017-01-09T15:51:50.714265] Compiling #unnamed sequence [log] at [source confgen system:4:5] [2017-01-09T15:51:50.714267] Compiling #unnamed sequence [source] at [source confgen system:4:5] [2017-01-09T15:51:50.714270] Compiling #unnamed junction [log] at [source confgen system:4:13] [2017-01-09T15:51:50.714272] Compiling #unnamed single [log] at [source confgen system:4:14] [2017-01-09T15:51:50.714276] Compiling #unnamed sequence [rewrite] at [source confgen system:6:5] [2017-01-09T15:51:50.714278] Compiling #unnamed single [log] at [source confgen system:6:15] [2017-01-09T15:51:50.714281] Compiling #unnamed single [log] at [source confgen system:8:1] [2017-01-09T15:51:50.714284] Compiling #unnamed single [log] at [/usr/local/etc/syslog-ng.conf:11:2] [2017-01-09T15:51:50.714288] Compiling d_local reference [destination] at [/usr/local/etc/syslog-ng.conf:27:2] [2017-01-09T15:51:50.714290] Compiling d_local sequence [destination] at [/usr/local/etc/syslog-ng.conf:18:1] [2017-01-09T15:51:50.714293] Compiling #unnamed junction [log] at [/usr/local/etc/syslog-ng.conf:18:22] [2017-01-09T15:51:50.714295] Compiling #unnamed single [log] at [/usr/local/etc/syslog-ng.conf:19:2] [2017-01-09T15:51:50.714410] Module loaded and initialized successfully; module='syslogformat' [2017-01-09T15:51:50.714689] Module loaded and initialized successfully; module='linux-kmsg-format' [2017-01-09T15:51:50.714794] Running application hooks; hook='1' [2017-01-09T15:51:50.714800] Running application hooks; hook='3' [2017-01-09T15:51:50.714823] syslog-ng starting up; version='3.6.4' On Mon, Jan 9, 2017 at 2:46 PM, James Elstone <james@elstone.net> wrote:
Hi Vijay,
Try running it from a command line manually; syslog-ng --help-all details the options, but try "syslog-ng -Fvd" and it should be quiet verbose as to why it won't start...
At least that will confirm your configuration file is OK!
Kr,
James
On 9 January 2017 22:00:23 GMT+00:00, vijay amruth <vijayamruth@gmail.com> wrote:
Hello guys, Happy new year!! Hope you are doing great.
I've installed (compiled ) syslog-ng on CentOS Linux 7 (Core) but after I got through the install which is all good, I cant get it to start, all it says is :
systemctl status syslog-ng ● syslog-ng.service Loaded: not-found (Reason: No such file or directory) Active: inactive (dead) [vch@slc ~]$ sudo systemctl enable syslog-ng Failed to execute operation: No such file or directory [vch@slc ~]$ sudo systemctl start syslog-ng Failed to start syslog-ng.service: Unit syslog-ng.service failed to load: No such file or directory.
Rsyslog is not running, I can't think of any, I am I missing some simple ?????? Any help is appreciated. -- Thanks, Vijay Amrut.
-- Sent from my Android device with K-9 Mail. Please excuse my brevity.
-- Thanks, Vijay Amrut.