Hi, I'm just learning about configuring syslog-ng. I'm using the latest version (info at end of email) and I've run into an error I can't figure out. I made a syntax error in my syslog-ng.conf that caused syslog-ng to fail to start. I corrected the error, but now when I try and start syslog-ng, it still fails. trying to start it with 'service syslog-ng start' or 'service syslog-ng restart' gets me: Job for syslog-ng.service failed. See "systemctl status syslog-ng.service" and "journalctl -xe" for details. But the error is buried in the systemd logs. Using '/usr/sbin/syslog-ng -F' gets me the following error: Error resolving reference; content='source', name='s_name', location='/etc/syslog-ng/syslog-ng.conf:132:7' What is that file? Can I safely delete it? Why can't I make it use the new .conf file? When I try '/usr/sbin/syslog-ng -f /etc/syslog-ng/syslog-ng.conf -F' I get the same error. syslog-ng 3.5.6 Installer-Version: 3.5.6 Revision: 3.5.6-2 [@416d315] (Ubuntu/15.04) Compile-Date: Oct 25 2014 14:14:32 Available-Modules: afuser,afsocket-notls,linux-kmsg-format,afprog,tfgeoip,csvparser,confgen,afamqp,json-plugin,redis,basicfuncs,afsmtp,affile,afsql,afmongodb,cryptofuncs,afsocket-tls,afsocket,syslogformat,afstomp,system-source,dbparser Enable-Debug: off Enable-GProf: off Enable-Memtrace: off Enable-IPv6: on Enable-Spoof-Source: on Enable-TCP-Wrapper: on Enable-Linux-Caps: on Enable-Pcre: on Craig L Bowser ____________________________ This email is measured by size. Bits and bytes may have settled during transport.
Never mind. For those that don't know, a coworker told me that error means the error is at line 132, column 7. Thanks. Craig L Bowser ____________________________ This email is measured by size. Bits and bytes may have settled during transport. On Wed, May 27, 2015 at 3:30 PM, craig bowser <reswob10@gmail.com> wrote:
Hi, I'm just learning about configuring syslog-ng. I'm using the latest version (info at end of email) and I've run into an error I can't figure out. I made a syntax error in my syslog-ng.conf that caused syslog-ng to fail to start. I corrected the error, but now when I try and start syslog-ng, it still fails.
trying to start it with 'service syslog-ng start' or 'service syslog-ng restart' gets me: Job for syslog-ng.service failed. See "systemctl status syslog-ng.service" and "journalctl -xe" for details.
But the error is buried in the systemd logs. Using '/usr/sbin/syslog-ng -F' gets me the following error:
Error resolving reference; content='source', name='s_name', location='/etc/syslog-ng/syslog-ng.conf:132:7'
What is that file? Can I safely delete it? Why can't I make it use the new .conf file? When I try '/usr/sbin/syslog-ng -f /etc/syslog-ng/syslog-ng.conf -F' I get the same error.
syslog-ng 3.5.6 Installer-Version: 3.5.6 Revision: 3.5.6-2 [@416d315] (Ubuntu/15.04) Compile-Date: Oct 25 2014 14:14:32 Available-Modules: afuser,afsocket-notls,linux-kmsg-format,afprog,tfgeoip,csvparser,confgen,afamqp,json-plugin,redis,basicfuncs,afsmtp,affile,afsql,afmongodb,cryptofuncs,afsocket-tls,afsocket,syslogformat,afstomp,system-source,dbparser Enable-Debug: off Enable-GProf: off Enable-Memtrace: off Enable-IPv6: on Enable-Spoof-Source: on Enable-TCP-Wrapper: on Enable-Linux-Caps: on Enable-Pcre: on
Craig L Bowser ____________________________
This email is measured by size. Bits and bytes may have settled during transport.
Yup, its a pretty common format though not necessarily the most intuitive if you haven't seen that. On May 27, 2015 9:48 PM, "craig bowser" <reswob10@gmail.com> wrote:
Never mind.
For those that don't know, a coworker told me that error means the error is at line 132, column 7.
Thanks.
Craig L Bowser ____________________________
This email is measured by size. Bits and bytes may have settled during transport.
On Wed, May 27, 2015 at 3:30 PM, craig bowser <reswob10@gmail.com> wrote:
Hi, I'm just learning about configuring syslog-ng. I'm using the latest version (info at end of email) and I've run into an error I can't figure out. I made a syntax error in my syslog-ng.conf that caused syslog-ng to fail to start. I corrected the error, but now when I try and start syslog-ng, it still fails.
trying to start it with 'service syslog-ng start' or 'service syslog-ng restart' gets me: Job for syslog-ng.service failed. See "systemctl status syslog-ng.service" and "journalctl -xe" for details.
But the error is buried in the systemd logs. Using '/usr/sbin/syslog-ng -F' gets me the following error:
Error resolving reference; content='source', name='s_name', location='/etc/syslog-ng/syslog-ng.conf:132:7'
What is that file? Can I safely delete it? Why can't I make it use the new .conf file? When I try '/usr/sbin/syslog-ng -f /etc/syslog-ng/syslog-ng.conf -F' I get the same error.
syslog-ng 3.5.6 Installer-Version: 3.5.6 Revision: 3.5.6-2 [@416d315] (Ubuntu/15.04) Compile-Date: Oct 25 2014 14:14:32 Available-Modules: afuser,afsocket-notls,linux-kmsg-format,afprog,tfgeoip,csvparser,confgen,afamqp,json-plugin,redis,basicfuncs,afsmtp,affile,afsql,afmongodb,cryptofuncs,afsocket-tls,afsocket,syslogformat,afstomp,system-source,dbparser Enable-Debug: off Enable-GProf: off Enable-Memtrace: off Enable-IPv6: on Enable-Spoof-Source: on Enable-TCP-Wrapper: on Enable-Linux-Caps: on Enable-Pcre: on
Craig L Bowser ____________________________
This email is measured by size. Bits and bytes may have settled during transport.
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
Hi, Can you tell what I'm doing wrong here? I entered destination mongodb { mongodb(); }; log { source(src); destination(mongodb); }; in syslogng.conf as in the directions and this is what happens: user@syslog:~/syslogng-web$ sudo service syslog-ng restart * Stopping system logging syslog-ng [ OK ] * Starting system logging syslog-ng Error parsing destination, destination plugin mongodb not found in /etc/syslog-ng/syslog-ng.conf at line 30, column 23: destination mongodb { mongodb() ; }; ^^^^^^^ syslog-ng documentation: http://www.balabit.com/support/documentation/?product=syslog-ng mailing list: https://lists.balabit.hu/mailman/listinfo/syslog-ng ________________________________________ From: syslog-ng-bounces@lists.balabit.hu [syslog-ng-bounces@lists.balabit.hu] on behalf of Scheidler, Balázs [balazs.scheidler@balabit.com] Sent: Wednesday, May 27, 2015 12:55 PM To: Syslog-ng users' and developers' mailing list Subject: Re: [syslog-ng] odd configuration file Yup, its a pretty common format though not necessarily the most intuitive if you haven't seen that. On May 27, 2015 9:48 PM, "craig bowser" <reswob10@gmail.com<mailto:reswob10@gmail.com>> wrote: Never mind. For those that don't know, a coworker told me that error means the error is at line 132, column 7. Thanks. Craig L Bowser ____________________________ This email is measured by size. Bits and bytes may have settled during transport. On Wed, May 27, 2015 at 3:30 PM, craig bowser <reswob10@gmail.com<mailto:reswob10@gmail.com>> wrote: Hi, I'm just learning about configuring syslog-ng. I'm using the latest version (info at end of email) and I've run into an error I can't figure out. I made a syntax error in my syslog-ng.conf that caused syslog-ng to fail to start. I corrected the error, but now when I try and start syslog-ng, it still fails. trying to start it with 'service syslog-ng start' or 'service syslog-ng restart' gets me: Job for syslog-ng.service failed. See "systemctl status syslog-ng.service" and "journalctl -xe" for details. But the error is buried in the systemd logs. Using '/usr/sbin/syslog-ng -F' gets me the following error: Error resolving reference; content='source', name='s_name', location='/etc/syslog-ng/syslog-ng.conf:132:7' What is that file? Can I safely delete it? Why can't I make it use the new .conf file? When I try '/usr/sbin/syslog-ng -f /etc/syslog-ng/syslog-ng.conf -F' I get the same error. syslog-ng 3.5.6 Installer-Version: 3.5.6 Revision: 3.5.6-2 [@416d315] (Ubuntu/15.04) Compile-Date: Oct 25 2014 14:14:32 Available-Modules: afuser,afsocket-notls,linux-kmsg-format,afprog,tfgeoip,csvparser,confgen,afamqp,json-plugin,redis,basicfuncs,afsmtp,affile,afsql,afmongodb,cryptofuncs,afsocket-tls,afsocket,syslogformat,afstomp,system-source,dbparser Enable-Debug: off Enable-GProf: off Enable-Memtrace: off Enable-IPv6: on Enable-Spoof-Source: on Enable-TCP-Wrapper: on Enable-Linux-Caps: on Enable-Pcre: on Craig L Bowser ____________________________ This email is measured by size. Bits and bytes may have settled during transport. ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
participants (3)
-
craig bowser
-
Rick Silacci
-
Scheidler, Balázs