[syslog-ng]Need help...with SYSLOG-NG

R Saroukhanian syslog-ng@lists.balabit.hu
Thu, 19 Jun 2003 17:14:55 -0400


> Hello folks,
>=20
> Could somebody help me with this error message I am getting when =
trying to run SYSLOG-NG?
>=20
> Error message:
> No source refers to internal messages, they will go to /dev/null
> unresolved reference:src
> Error initializing configuration, exiting.
>=20
> Here is my setup.
>=20
> I installed syslog-ng version 1.6.0 r3 on my FreeBSD 4.8 box.
>=20
> The overall plan is to collect log messages sent to by NTSyslog from a =
Windows 2000 box to SYSLOG-NG on the FreeBSD 4.8 box.
> For a test I have been starting and stopping a telnet service on my =
Windows 2000 box to pick  up these events in the telnetlog file which I =
created on my FreeBSD computer.
>=20
> Both syslog-ng and syslog-ng.conf file are located in /etc of the =
FreeBSD box.
>=20
> I am logged in as root.
>=20
> syslog.conf file looks like this:
>=20
> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
> options {sync(0); };
>=20
> source src_udp {udp(10.101.54.2) port(514); };
>=20
> destination telnet_d {file ("/var/log/telnetlog"); } ;
>=20
> log {source (src_udp);  destination (telnet_t); };
>=20
> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
>=20
>=20
> I run syslog-ng manually from inside /etc and get the error message =
listed above.
>=20
> Does the error message I am getting relate to syntax of the =
syslog-ng.conf or something else?
>=20
> Should I add a filter entry ...inside log statement argument? for it =
to lool like >>>>>>  log {source (src_udp);  filter (DEFAUILT); =
destination (telnet_t); }; ???
>=20
> I am looking forward to hearing from you.
>=20
> Please send a copy of your response to rex@piva.net.
>=20
> Thank you,
>=20
> Ruben Saroukhanian