[syslog-ng] Destination systax fail ??

Hamilton, Andrew Mr. HamiltonA@hq.5sigcmd.army.mil
Thu, 15 Jun 2000 07:02:11 +0200


Yes, there is a problem the line should read

destination remotenet { udp("10.0.0.10" port(514)); };

The port statement goes inside the parentheses since it is a function of udp
for a destination.  sources are a little different.

Hope this helps.

Drew

> -----Original Message-----
> From:	Leonardo Marques de Souza [SMTP:leo@conectiva.com.br]
> Sent:	Wednesday, June 14, 2000 10:19 PM
> To:	syslog-ng@lists.balabit.hu
> Subject:	[syslog-ng] Destination systax fail ??
> 
> 
> Helo,
> 
> I would like to know what's happen with syslog-ng.conf systax in this
> part of confiruration:
> 
> # --------8<-------------
> 
> # Leitura da porta UDP do syslog padrao (514)
> #
> # Por padrao, ele nao esta ligado na instalacao
> # Para inicia-lo, basta descomentar a linha abaixo
> 
> source net { udp(ip("10.0.2.4") port(514)); };
> 
> # ---------------------------
> # Destino dos dados Filtrados
> # ---------------------------
> 
> destination remotenet {udp(ip("10.0.0.10") port(514)); };   <-------(this
> part have errors ????)
> destination console { pipe("/dev/console"); };
> destination messages { file("/var/log/messages"); };
> destination secure { file("/var/log/secure"); };
> destination maillog { file("/var/log/maillog"); };
> destination spooler { file("/var/log/spooler"); };
> destination boot { file("/var/log/boot.log"); };
> 
> # -------8<------------------
> 
> [root@patolino syslog-ng-1.4.4]# /usr/sbin/syslog-ng -d -v -f
> /etc/syslog-ng/syslog-ng.conf 
> parse error at 33
> Parse error reading configuration file, exiting.
> [root@patolino syslog-ng-1.4.4]# 
> 
> (line 33 refers to destination remotenet ...)
> 
> i tryed this syntaxes:
> ****
> destination remotenet { udp(ip("10.0.0.10") port(514)); };
> destination remotenet { udp(ip(10.0.0.10) port(514)); };
> destination remotenet { udp(ip("10.0.0.10") port(514);); };
> destination remotenet { udp(ip("10.0.0.10"); port(514)); };
> destination remotenet { udp(ip("10.0.0.10"); port(514);); };
> destination remotenet { udp(ip("10.0.0.10")); };
> destination remotenet { tcp(ip("10.0.0.10") port(514)); };
> destination remotenet { udp(ip(10.0.0.10) port(514);); };
> destination rtteste { udp(ip("10.0.0.10") port(514)); };
> destination remote_net { udp(ip("10.0.0.10") port(514) ); };
> **
> 
> no sucess.. :(
> 
> egcs-1.1.2
> glibc 2.1.3~ 2.1.2
> libol-0.2.17
> syslog-ng-1.4.4
> kernel-2.2.16
> 
> 
> Any one can help me??
> who can i increase de Debug?? What i can do to fix that (in source font)?
> thanks..
> 
> PS.:
> 
> This program have any restriction?? Its realy 100% GPL??
> We are thinking to put this program in our distribution here, in Brazil.
> I built a RPM package, but i trying to a log of tests in our servers (430 
> servers)...
> syslog fails to do that :((
> lose data, do not restart veri well, use a lot os CPU... :((
> 
> i trying syslog-ng to eliminate (or decrese) this problems..
> 
> Thank's in advanced!!
> 
> 
> Leonardo Marques de Souza
> +--------------------------+
> |      Conectiva S/A       |
> |Curitiba - Parana - Brazil|
> |     Suporte Interno      |
> +--------------------------+
> 
> 
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> http://lists.balabit.hu/mailman/listinfo/syslog-ng