[syslog-ng]Trying to send log over network
Simeon Johnston
simeonuj@eetc.com
Tue, 13 Feb 2001 20:53:09 -0600
I am trying to send logs over our network but am having trouble with the
rules. I have set up a host to accept the logs and I am trying to set
up the sender. This is the destination rule so far.
destination d_bg { tcp(ip(192.168.1.19) port(514)); };
When I try to start syslog-ng it gives me this error.
parse error at 31
Parse error reading configuration file, exiting.
Line 31 is the above rule. This is the complete config of syslog-ng so
far.
options { sync (0);
time_reopen (10);
log_fifo_size (1000);
long_hostnames (on);
use_dns (no);
use_fqdn (no);
create_dirs (yes);
keep_hostname (yes);
};
source s_sys { unix-stream ("/dev/log"); internal(); };
destination d_cons { file("/var/log/ng/kern.log"); };
destination d_mesg { file("/var/log/ng/messages"); };
destination d_auth { file("/var/log/ng/secure"); };
destination d_mail { file("/var/log/ng/maillog"); };
destination d_spol { file("/var/log/ng/spooler"); };
destination d_boot { file("/var/log/ng/boot.log"); };
destination d_mlal { file("/var/log/ng/emerg.log"); };
destination d_dhcp { file("/var/log/ng/dhcpd.log"); };
destination d_ipchains { file("/var/log/ng/ipchains.log"); };
destination d_bg { tcp(ip(192.168.1.19) port(514)); };
filter f_filter1 { facility(kern); };
filter f_filter2 { level(info); };
filter f_filter3 { facility(authpriv); };
filter f_filter4 { facility(mail); };
filter f_filter5 { level(emerg); };
filter f_filter6 { facility(uucp) or
(facility(news) and level(crit)); };
filter f_dhcp { match("dhcpd"); };
filter f_ipchains { match("ipchains"); };
filter f_tcplog { level(debug); };
log { source(s_sys); filter(f_filter1); destination(d_cons); };
log { source(s_sys); filter(f_filter2); destination(d_mesg); };
log { source(s_sys); filter(f_filter3); destination(d_auth); };
log { source(s_sys); filter(f_filter4); destination(d_mail); };
log { source(s_sys); filter(f_filter5); destination(d_mlal); };
log { source(s_sys); filter(f_filter6); destination(d_spol); };
log { source(s_sys); filter(f_dhcp); destination(d_dhcp); };
log { source(s_sys); filter(f_ipchains); destination(d_ipchains); };
log { source(s_sys); filter(f_tcplog); destination(d_bg); };
Any help would be appreciated.
sim