[syslog-ng] A Bug and few sugestions..

[Balazs Scheidler]

> Hi... 
> I'm running Syslog-ng 1.4.3 as a loghost  and on a workstation behind a
> gateway... both RedHat 6.1
> 
> hmmm problems i've found...
> 
> '#' seems to work not correctly... 
> 	i've comment a few things in my syslog-ng.conf... and if the comment
> 	was not at the beginning of a line.. i got a parsing error..
> 
> '#' seems not to comment out log, source, ... -statements....
> 	if i comment out the destination and filter rule for ppp from the
> 	standart debian example syslog-ng.conf .... i got a parsing error...
> 	saying something like... ppp was an unresolve identifer...

I'll check this out.

> 
> and here my sugestions...
> 
> what about ...say 'virtual pipes'.... or bracket rules...
> 	what i meen is... if you have a logingstatement like this
> 	log {source(src1); filter(f_1); source(src2); destination(dst1); };
> 	(this seems to work on my maschine... throu this is not documented)
> 	and you now want to filter src2 with another filter.... when filter f_2
> 	will filter both.... and not just the 2nd source...
> 	There would be something like a internal pipe helpy... 
> 	So you define a pipe and use this to curving around the 2nd source and
> 	filter... or what would be even better... to create brackets around the
> 	2nd source and filter... so the filter will just afect src2....

What about using several log statements:

log { source(src1); filter (f_1); destination(dst1); };
log { source(src1); filter (f_2); destination(dst1); };

> 
> customized macros...
> 	what about just defining your own macros... say like constants...
> 	for example you can define LOGDIR="/var/log";
> 	and then in a destination-rule it will sound like 
> 	destination warn {file("$LOGDIR/warn");};
> 	....or just...
> 	FNW="not filter(warn);";
> 	but i thing macros an const have to be captalized by definition...

You could preprocess your files with cpp or m4.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
     url: http://www.balabit.hu/pgpkey.txt