system() source problem.
I compiled a syslog-ng 3.4 and when starting I get teh following error message: Error parsing source, source plugin system not found in /etc/syslog-ng/syslog-ng.conf at line 31, column 2: system(); The part of syslog-ng.conf is the following: source s_src { # message generated by Syslog-NG internal(); # standard Linux log source (this is the default place for the syslog() # function to send logs to) unix-stream("/dev/log"); # messages from the kernel file("/proc/kmsg" program_override("kernel")); # use the following line if you want to receive remote UDP logging messages # (this is equivalent to the "-r" syslogd flag) # udp(); system(); }; According to the documentation the system() source is correct.. What is wrong here? When I comment the system() source out, the syslog-ng daemon starts without errors. # syslog-ng -V syslog-ng 3.4.2 Installer-Version: 3.4.2 Revision: Compile-Date: Aug 5 2013 11:00:20 Available-Modules: syslogformat,afsocket-notls,afsocket-tls,afsql,affile,afprog,afuser,afamqp,afmongodb,csvparser,confgen,system-source,basicfuncs,cryptofuncs,dbparser,afsocket Enable-Debug: off Enable-GProf: off Enable-Memtrace: off Enable-IPv6: on Enable-Spoof-Source: on Enable-TCP-Wrapper: off Enable-Linux-Caps: off Enable-Pcre: on -- Friczy
have you got @include "scl.conf" in your config? On Mon, Aug 5, 2013 at 4:51 PM, Nemeth Gyorgy <lists@friczy.net> wrote:
I compiled a syslog-ng 3.4 and when starting I get teh following error message:
Error parsing source, source plugin system not found in /etc/syslog-ng/syslog-ng.conf at line 31, column 2:
system();
The part of syslog-ng.conf is the following: source s_src { # message generated by Syslog-NG internal(); # standard Linux log source (this is the default place for the syslog() # function to send logs to) unix-stream("/dev/log"); # messages from the kernel file("/proc/kmsg" program_override("kernel")); # use the following line if you want to receive remote UDP logging messages # (this is equivalent to the "-r" syslogd flag) # udp(); system(); };
According to the documentation the system() source is correct.. What is wrong here?
When I comment the system() source out, the syslog-ng daemon starts without errors.
# syslog-ng -V syslog-ng 3.4.2 Installer-Version: 3.4.2 Revision: Compile-Date: Aug 5 2013 11:00:20 Available-Modules:
syslogformat,afsocket-notls,afsocket-tls,afsql,affile,afprog,afuser,afamqp,afmongodb,csvparser,confgen,system-source,basicfuncs,cryptofuncs,dbparser,afsocket Enable-Debug: off Enable-GProf: off Enable-Memtrace: off Enable-IPv6: on Enable-Spoof-Source: on Enable-TCP-Wrapper: off Enable-Linux-Caps: off Enable-Pcre: on
-- Friczy
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
Thanks. This solved the problem. 2013.08.05. 17:02 keltezéssel, Sandor Geller írta:
have you got
@include "scl.conf"
in your config?
On Mon, Aug 5, 2013 at 4:51 PM, Nemeth Gyorgy <lists@friczy.net <mailto:lists@friczy.net>> wrote:
I compiled a syslog-ng 3.4 and when starting I get teh following error message:
Error parsing source, source plugin system not found in /etc/syslog-ng/syslog-ng.conf at line 31, column 2:
system();
The part of syslog-ng.conf is the following: source s_src { # message generated by Syslog-NG internal(); # standard Linux log source (this is the default place for the syslog() # function to send logs to) unix-stream("/dev/log"); # messages from the kernel file("/proc/kmsg" program_override("kernel")); # use the following line if you want to receive remote UDP logging messages # (this is equivalent to the "-r" syslogd flag) # udp(); system(); };
According to the documentation the system() source is correct.. What is wrong here?
When I comment the system() source out, the syslog-ng daemon starts without errors.
# syslog-ng -V syslog-ng 3.4.2 Installer-Version: 3.4.2 Revision: Compile-Date: Aug 5 2013 11:00:20 Available-Modules: syslogformat,afsocket-notls,afsocket-tls,afsql,affile,afprog,afuser,afamqp,afmongodb,csvparser,confgen,system-source,basicfuncs,cryptofuncs,dbparser,afsocket Enable-Debug: off Enable-GProf: off Enable-Memtrace: off Enable-IPv6: on Enable-Spoof-Source: on Enable-TCP-Wrapper: off Enable-Linux-Caps: off Enable-Pcre: on
-- Friczy ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
So note however that system() is expanded to the same things you already have in your config. On Aug 5, 2013 4:51 PM, "Nemeth Gyorgy" <lists@friczy.net> wrote:
I compiled a syslog-ng 3.4 and when starting I get teh following error message:
Error parsing source, source plugin system not found in /etc/syslog-ng/syslog-ng.conf at line 31, column 2:
system();
The part of syslog-ng.conf is the following: source s_src { # message generated by Syslog-NG internal(); # standard Linux log source (this is the default place for the syslog() # function to send logs to) unix-stream("/dev/log"); # messages from the kernel file("/proc/kmsg" program_override("kernel")); # use the following line if you want to receive remote UDP logging messages # (this is equivalent to the "-r" syslogd flag) # udp(); system(); };
According to the documentation the system() source is correct.. What is wrong here?
When I comment the system() source out, the syslog-ng daemon starts without errors.
# syslog-ng -V syslog-ng 3.4.2 Installer-Version: 3.4.2 Revision: Compile-Date: Aug 5 2013 11:00:20 Available-Modules:
syslogformat,afsocket-notls,afsocket-tls,afsql,affile,afprog,afuser,afamqp,afmongodb,csvparser,confgen,system-source,basicfuncs,cryptofuncs,dbparser,afsocket Enable-Debug: off Enable-GProf: off Enable-Memtrace: off Enable-IPv6: on Enable-Spoof-Source: on Enable-TCP-Wrapper: off Enable-Linux-Caps: off Enable-Pcre: on
-- Friczy
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
participants (3)
-
Balazs Scheidler
-
Nemeth Gyorgy
-
Sandor Geller