[syslog-ng]Need help...with SYSLOG-NG
Nate Campi
syslog-ng@lists.balabit.hu
Thu, 19 Jun 2003 16:58:15 -0700
On Thu, Jun 19, 2003 at 05:14:55PM -0400, R Saroukhanian wrote:
> > Hello folks,
> >
> > Could somebody help me with this error message I am getting when trying to run SYSLOG-NG?
> >
> > Error message:
> > No source refers to internal messages, they will go to /dev/null
> > unresolved reference:src
> > Error initializing configuration, exiting.
> >
> > Here is my setup.
> >
> > I installed syslog-ng version 1.6.0 r3 on my FreeBSD 4.8 box.
> >
> > The overall plan is to collect log messages sent to by NTSyslog from a Windows 2000 box to SYSLOG-NG on the FreeBSD 4.8 box.
> > For a test I have been starting and stopping a telnet service on my Windows 2000 box to pick up these events in the telnetlog file which I created on my FreeBSD computer.
> >
> > Both syslog-ng and syslog-ng.conf file are located in /etc of the FreeBSD box.
> >
> > I am logged in as root.
> >
> > syslog.conf file looks like this:
> >
> > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
> > options {sync(0); };
> >
> > source src_udp {udp(10.101.54.2) port(514); };
> >
> > destination telnet_d {file ("/var/log/telnetlog"); } ;
> >
> > log {source (src_udp); destination (telnet_t); };
> >
> > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
I didn't address the error that makes syslog-ng exit, how lame of me :(
Here's what I think you want out of syslog-ng:
####################################################
options { sync(0); };
source src_udp {
udp(10.101.54.2) port(514);
internal;
};
destination telnet_d { file ("/var/log/telnetlog"); } ;
log {
source (src);
destination (telnet_d);
};
####################################################
I fixed the differing destination name, and make your source name
consistent, and added the internal source. This should at least get your
basic setup working.
Sorry I didn't pay more attention the first time.
--
Nate Campi http://www.campin.net