Hello, I have install syslog-ng on solaris 10(machine A],it configured as log proxy server more /etc/syslog-ng/syslog-ng.conf options { chain_hostnames(no); keep_hostname(yes); use_fqdn(yes); log_fifo_size(1000); }; source local { sun-stream("/dev/log"); udp(ip(0.0.0.0) port(514)); internal(); }; filter notdebug { level(info...emerg); }; destination ercmas13.eurocontrol.fr{ udp("ercmas13.eurocontrol.fr" port (514)); }; log { source(local); filter (notdebug); destination(ercmas13.eurocontrol.fr); }; A client (Machine C) on solaris 10 send logs on (Machine A) I say the log on ercmas13 (logs server) A client (Machine B) on redhat 4 send log on (Machine B) I have nothing on the log server I change this information in this files syslog-ng.conf on log proxy server Each possible communication mechanism has a corresponding source driver in syslog-ng. For example, to open a unix socket with SOCK_DGRAM style communication use the driver unix-dgram. The same socket using the SOCK_STREAM style - as used under Linux - is called unix-stream. source local { unix-stream("/dev/log"); udp(ip(0.0.0.0) port(514)); internal(); }; But when i restart le syslog-ng on log proxy server /etc/init.d/syslog-ng start syslog-ng service starting. Error binding socket; addr='AF_UNIX(/dev/log)', error='Address already in use (125)' Error initializing source driver; source='local' What is the problem ? Best regards Eric FELLMANN ____ This message and any files transmitted with it are legally privileged and intended for the sole use of the individual(s) or entity to whom they are addressed. If you are not the intended recipient, please notify the sender by reply and delete the message and any attachments from your system. Any unauthorised use or disclosure of the content of this message is strictly prohibited and may be unlawful. Nothing in this e-mail message amounts to a contractual or legal commitment on the part of EUROCONTROL, unless it is confirmed by appropriately signed hard copy. Any views expressed in this message are those of the sender.
Hi,
I have install syslog-ng on solaris 10(machine A],it configured as log proxy server
[ snip ]
source local { sun-stream("/dev/log"); udp(ip(0.0.0.0) port(514)); internal(); };
On solaris 10 you should use sun-streams + door like sun-streams("/dev/log" door("/etc/.syslog_door"));
A client (Machine C) on solaris 10 send logs on (Machine A) I say the log on ercmas13 (logs server)
A client (Machine B) on redhat 4 send log on (Machine B) I have nothing on the log server
tcpdump/snoop help you to see whether the RHEL host actually forwards the logs or not
But when i restart le syslog-ng on log proxy server
/etc/init.d/syslog-ng start
Did you stop the running instance of syslog-ng first? Regards, Sandor -------------------------------------------------------- NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.
participants (2)
-
FELLMANN Eric (EXT)
-
Geller, Sandor (IT)