Yes, there is a problem the line should read destination remotenet { udp("10.0.0.10" port(514)); }; The port statement goes inside the parentheses since it is a function of udp for a destination. sources are a little different. Hope this helps. Drew
-----Original Message----- From: Leonardo Marques de Souza [SMTP:leo@conectiva.com.br] Sent: Wednesday, June 14, 2000 10:19 PM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] Destination systax fail ??
Helo,
I would like to know what's happen with syslog-ng.conf systax in this part of confiruration:
# --------8<-------------
# Leitura da porta UDP do syslog padrao (514) # # Por padrao, ele nao esta ligado na instalacao # Para inicia-lo, basta descomentar a linha abaixo
source net { udp(ip("10.0.2.4") port(514)); };
# --------------------------- # Destino dos dados Filtrados # ---------------------------
destination remotenet {udp(ip("10.0.0.10") port(514)); }; <-------(this part have errors ????) destination console { pipe("/dev/console"); }; destination messages { file("/var/log/messages"); }; destination secure { file("/var/log/secure"); }; destination maillog { file("/var/log/maillog"); }; destination spooler { file("/var/log/spooler"); }; destination boot { file("/var/log/boot.log"); };
# -------8<------------------
[root@patolino syslog-ng-1.4.4]# /usr/sbin/syslog-ng -d -v -f /etc/syslog-ng/syslog-ng.conf parse error at 33 Parse error reading configuration file, exiting. [root@patolino syslog-ng-1.4.4]#
(line 33 refers to destination remotenet ...)
i tryed this syntaxes: **** destination remotenet { udp(ip("10.0.0.10") port(514)); }; destination remotenet { udp(ip(10.0.0.10) port(514)); }; destination remotenet { udp(ip("10.0.0.10") port(514);); }; destination remotenet { udp(ip("10.0.0.10"); port(514)); }; destination remotenet { udp(ip("10.0.0.10"); port(514);); }; destination remotenet { udp(ip("10.0.0.10")); }; destination remotenet { tcp(ip("10.0.0.10") port(514)); }; destination remotenet { udp(ip(10.0.0.10) port(514);); }; destination rtteste { udp(ip("10.0.0.10") port(514)); }; destination remote_net { udp(ip("10.0.0.10") port(514) ); }; **
no sucess.. :(
egcs-1.1.2 glibc 2.1.3~ 2.1.2 libol-0.2.17 syslog-ng-1.4.4 kernel-2.2.16
Any one can help me?? who can i increase de Debug?? What i can do to fix that (in source font)? thanks..
PS.:
This program have any restriction?? Its realy 100% GPL?? We are thinking to put this program in our distribution here, in Brazil. I built a RPM package, but i trying to a log of tests in our servers (430 servers)... syslog fails to do that :(( lose data, do not restart veri well, use a lot os CPU... :((
i trying syslog-ng to eliminate (or decrese) this problems..
Thank's in advanced!!
Leonardo Marques de Souza +--------------------------+ | Conectiva S/A | |Curitiba - Parana - Brazil| | Suporte Interno | +--------------------------+
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/syslog-ng