RE: [syslog-ng]syslog-ng template does not work
The template() destinations are only supported by the 1.5.x and up. I would upgrade your version of syslog-ng. Michael PGP Info: KeyID 0x0DFD993C Fingerprint F903 0325 5105 2CDB 4BF4 C88B 72F7 BA7A 28CC 598A -----Original Message----- From: Sirinus [mailto:sirinus@excite.com] Sent: Monday, November 01, 2004 2:39 PM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng]syslog-ng template does not work Hello, Everyone, I just installed syslog-ng on my mandrake-9.2 with the rpm package: syslog-ng-1.4.17-3mdk.src.rpm For generly log, it works fine. However, I would like to forward my logs to MySql database. So I tried to follow the tutorials of Michael Earls ( ohttp://vermeer.org/display_doc.php?doc_id=1). However, after I added the following line to my syslog-ng.conf, each time when I tried to restart syslog-ng, it tells sth is wrong. The following is what I have done: 1. Add the following to my syslog-ng.conf so that I can log to mysql database: ## Log syslog-ng to mysql database ## destination d_mysql { pipe("/tmp/mysql.pipe" template("INSERT INTO logs (host, facility, priority, level, tag, date, time, program, msg) VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL', '$TAG', '$YEAR-$MONTH-$DAY', '$HOUR:$MIN:$SEC', '$PROGRAM', '$MSG' );\n") template-escape(yes)); }; log { source(net); destination(d_mysql); }; 2. stop syslog-ng [root@localhost tmp]# service syslog-ng stop Shutting down kernel logger: [ OK ] Shutting down system logger: [ OK ] 3. restart syslog-ng [root@localhost tmp]# service syslog-ng start Starting system logger: parse error at 27 Parse error reading configuration file, exiting. [FAILED] starting kernel logger: [ OK ] NOTE: line 27 is where "template ("INSERT INTO logs (host, facility, priority, level, tag, " showing the first step. I wonder to know what's wrong with this configuration? I tried to read the source code. I cannot find any thing related to "template". Does syslog-ng 1.4.17 support "template"? How could I fix the problem? THanks a lot Yours Ch Zhang _______________________________________________ Join Excite! - http://www.excite.com The most personalized portal on the Web! _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated.
participants (1)
-
Earls, Michael