Hello, The wildcard file source was introduced in thr 3.10 version. Please try at least that version. The latest syslog-ng version is 3.14. -- Kokan On Thu, 12 Apr 2018, 1:22 am Eric Anderson, <eric.anderson@stonecroptech.com> wrote:

Im trying to use the wildcard-file module, but the syslog-ng Module: wildcard-file is missing

# service syslog-ng start

Error parsing source, source plugin wildcard-file not found in /etc/syslog-ng/conf.d/export-client.conf at line 4, column 29:

included from /etc/syslog-ng/syslog-ng.conf line 71, column 1

source s_export_recursive { wildcard-file(

^^^^^^^^^^^^^

I upgraded to the latest syslog-ng

# syslog-ng -V

syslog-ng 3.9.1

Installer-Version: 3.9.1

Revision:

Module-Directory: //usr/lib64/syslog-ng

Module-Path: //usr/lib64/syslog-ng

Available-Modules: kvformat,afprog,afsocket,basicfuncs,linux-kmsg-format,graphite,cef,curl,add-contextual-data,date,json-plugin,pseudofile,afstomp,dbparser,confgen,cryptofuncs,syslogformat,disk-buffer,afuser,afamqp,csvparser,affile,system-source

Enable-Debug: off

Enable-GProf: off

Enable-Memtrace: off

Enable-IPv6: on

Enable-Spoof-Source: off

Enable-TCP-Wrapper: on

Enable-Linux-Caps: on

But I still don’t see where the wildcard-file is.

*What Im missing to enable the wildcard-file module?*

The conf file Ive created where I want to use it looks like this:

# syslog-ng conf file for central logging CLIENT: export

#

# export source

source s_export_recursive { wildcard-file(

base-dir("/var/www/capstan/shared/log/exports/")

filename-pattern("*.log")

recursive(yes)

follow-freq(1)

flags(no-parse)

log-fetch-limit(100)

); };

# export destination

destination d_export_app1 { tcp(10.0.32.97 port(601)); };

# export log

log { source(s_export_recursive); destination(d_export_app1); };

*Eric Anderson* | DevOps Engineer

E: eric.anderson@stonecroptech.com <michaelg@stonecroptech.com> | O: 212.500.2017 | M: 650.743.4598

______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq