Hello folks,
Could somebody help me with this error message I am getting when trying to run SYSLOG-NG?
Error message: No source refers to internal messages, they will go to /dev/null unresolved reference:src Error initializing configuration, exiting.
Here is my setup.
I installed syslog-ng version 1.6.0 r3 on my FreeBSD 4.8 box.
The overall plan is to collect log messages sent to by NTSyslog from a Windows 2000 box to SYSLOG-NG on the FreeBSD 4.8 box. For a test I have been starting and stopping a telnet service on my Windows 2000 box to pick up these events in the telnetlog file which I created on my FreeBSD computer.
Both syslog-ng and syslog-ng.conf file are located in /etc of the FreeBSD box.
I am logged in as root.
syslog.conf file looks like this:
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> options {sync(0); };
source src_udp {udp(10.101.54.2) port(514); };
destination telnet_d {file ("/var/log/telnetlog"); } ;
log {source (src_udp); destination (telnet_t); };
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
I run syslog-ng manually from inside /etc and get the error message listed above.
Does the error message I am getting relate to syntax of the syslog-ng.conf or something else?
Should I add a filter entry ...inside log statement argument? for it to lool like >>>>>> log {source (src_udp); filter (DEFAUILT); destination (telnet_t); }; ???
I am looking forward to hearing from you.
Please send a copy of your response to rex@piva.net.
Thank you,
Ruben Saroukhanian
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> options {sync(0); };
source src_udp {udp(10.101.54.2) port(514); };
destination telnet_d {file ("/var/log/telnetlog"); } ;
----------------^^^^^^^^
log {source (src_udp); destination (telnet_t); }; -----------------------------------------^^^^^^^^
... maybe it relates to that? Fix that and see what it does. Rob -- Robert Lister - London Internet Exchange - http://www.linx.net/ - tel: +44 (0)20 7645 3510 - RL786-RIPE
On Thu, Jun 19, 2003 at 05:14:55PM -0400, R Saroukhanian wrote:
Error message: No source refers to internal messages, they will go to /dev/null unresolved reference:src Error initializing configuration, exiting.
<snip>
syslog.conf file looks like this:
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> options {sync(0); };
source src_udp {udp(10.101.54.2) port(514); };
You'll need to declare the "internal" source too. See the FAQ and the links to example syslog-ng.conf files. -- Nate Campi http://www.campin.net
On Thu, Jun 19, 2003 at 05:14:55PM -0400, R Saroukhanian wrote:
Hello folks,
Could somebody help me with this error message I am getting when trying to run SYSLOG-NG?
Error message: No source refers to internal messages, they will go to /dev/null unresolved reference:src Error initializing configuration, exiting.
Here is my setup.
I installed syslog-ng version 1.6.0 r3 on my FreeBSD 4.8 box.
The overall plan is to collect log messages sent to by NTSyslog from a Windows 2000 box to SYSLOG-NG on the FreeBSD 4.8 box. For a test I have been starting and stopping a telnet service on my Windows 2000 box to pick up these events in the telnetlog file which I created on my FreeBSD computer.
Both syslog-ng and syslog-ng.conf file are located in /etc of the FreeBSD box.
I am logged in as root.
syslog.conf file looks like this:
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> options {sync(0); };
source src_udp {udp(10.101.54.2) port(514); };
destination telnet_d {file ("/var/log/telnetlog"); } ;
log {source (src_udp); destination (telnet_t); };
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
I didn't address the error that makes syslog-ng exit, how lame of me :( Here's what I think you want out of syslog-ng: #################################################### options { sync(0); }; source src_udp { udp(10.101.54.2) port(514); internal; }; destination telnet_d { file ("/var/log/telnetlog"); } ; log { source (src); destination (telnet_d); }; #################################################### I fixed the differing destination name, and make your source name consistent, and added the internal source. This should at least get your basic setup working. Sorry I didn't pay more attention the first time. -- Nate Campi http://www.campin.net
On Thu, Jun 19, 2003 at 04:58:15PM -0700, Nate Campi wrote:
source src_udp { udp(10.101.54.2) port(514); internal; };
Arg, make that "internal();" I promise not to reply to myself again on this thread, no matter how bad my next mistake is ;) -- Nate Campi http://www.campin.net
participants (3)
-
Nate Campi
-
R Saroukhanian
-
Robert Lister