[syslog-ng]syslog-ng do not work....
Andrew Culver
syslog-ng@lists.balabit.hu
Tue, 27 Jan 2004 12:45:23 -0500
This is a multi-part message in MIME format.
------=_NextPart_000_0015_01C3E4D3.6E69DD90
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Maybe this is too simple but.. is that your entire config file? Do you =
not have destination and log directives?
----- Original Message -----=20
From: Alessandro Fiorenzi=20
To: Syslog-ng=20
Sent: Tuesday, January 27, 2004 10:52 AM
Subject: [syslog-ng]syslog-ng do not work....
Hi, I have set this configuration on central logserver
options {
long_hostnames(off); =20
sync(0); =20
log_fifo_size(1000);
dnscache(yes);
use_fqdn(yes);
use_time_recvd(true);
};
source src {
internal();
file("/proc/kmsg" log_prefix("kernel: "));
tcp(ip(192.168.52.100) port(514) max-connections(1000));
udp(ip(0.0.0.0) port(514));
};
but it does not work. The fist errore is on dnscache(yes);, if i =
remove this I get the second on use_time_recvd(true);, remove this one I =
get errore on file("/proc/kmsg" log_prefix("kernel: ")); .... why?
Thanks
Fiorenzi A.
=
------------------------------------------------------------------------ =
INFOGROUP S.P.A http://www.infogroup.it=20
=
-------------------------------------------------------------------------=
DR. FIORENZI ALESSANDRO=20
Consulente Tribunale Firenze - sicurezza informatica -
Security Administrator=20
Socio CLUSIT, ALSI
Tel : +39.055.43.65.742=20
CE : +39.335.64.144.77=20
@Email : a.fiorenzi@infogroup.it=20
PGP Key: http://www.infogroup.it/ds/fiorenzi.asc
=
-------------------------------------------------------------------------=
"Faber est suae quisque fortunae"=20
=
-------------------------------------------------------------------------=
=20
=20
------=_NextPart_000_0015_01C3E4D3.6E69DD90
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
=EF=BB=BF<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; CHARSET=3DUTF-8">
<META content=3D"MSHTML 6.00.2800.1276" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT size=3D2>Maybe this is too simple but.. is that your entire =
config=20
file? Do you not have destination and log directives?</FONT></DIV>
<BLOCKQUOTE=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV=20
style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
<A title=3Da.fiorenzi@infogroup.it=20
href=3D"mailto:a.fiorenzi@infogroup.it">Alessandro Fiorenzi</A> </DIV>
<DIV style=3D"FONT: 10pt arial"><B>To:</B> <A =
title=3Dsyslog-ng@lists.balabit.hu=20
href=3D"mailto:syslog-ng@lists.balabit.hu">Syslog-ng</A> </DIV>
<DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Tuesday, January 27, 2004 =
10:52=20
AM</DIV>
<DIV style=3D"FONT: 10pt arial"><B>Subject:</B> [syslog-ng]syslog-ng =
do not=20
work....</DIV>
<DIV><BR></DIV>Hi, I have set this configuration on central=20
logserver<BR><BR>options =
{<BR> =20
long_hostnames(off); =20
<BR> =20
sync(0); =20
<BR> =20
log_fifo_size(1000);<BR> =20
dnscache(yes);<BR> =20
use_fqdn(yes);<BR> =20
use_time_recvd(true);<BR> =20
};<BR><BR>source src {<BR> =20
internal();<BR> =
file("/proc/kmsg"=20
log_prefix("kernel: "));<BR> =
tcp(ip(192.168.52.100) port(514)=20
max-connections(1000));<BR> =20
udp(ip(0.0.0.0) =
port(514));<BR> =20
};<BR><BR>but it does not work. The fist errore is on dnscache(yes);, =
if i=20
remove this I get the second on use_time_recvd(true);, remove this one =
I get=20
errore on file("/proc/kmsg" log_prefix("kernel: ")); ....=20
why?<BR><BR>Thanks<BR><BR>Fiorenzi A.<BR><BR><BR>
<TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%">
<TBODY>
<TR>
<TD>
<TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%">
<TBODY>
<TR>
<TD><FONT=20
=
size=3D3><B>-------------------------------------------------------------=
-----------=20
<ADDRESS>INFOGROUP S.P.A =20
=20
http://www.infogroup.it=20
=
</ADDRESS>---------------------------------------------------------------=
----------<BR>DR.=20
FIORENZI ALESSANDRO </B></FONT><BR><BR>Consulente =
Tribunale=20
Firenze - sicurezza informatica -<BR>Security =
Administrator=20
<BR>Socio <A=20
=
href=3D"file:///home/fiore/signature/www.clusit.it"><U>CLUSIT</U></A>,=20
<A=20
=
href=3D"file:///home/fiore/signature/www.alsi.it"><U>ALSI</U></A><BR><BR>=
<BR><BR><BR>
<ADDRESS>Tel : +39.055.43.65.742 <BR>CE : =
+39.335.64.144.77=20
<BR>@Email : a.fiorenzi@infogroup.it <BR>PGP Key:=20
http://www.infogroup.it/ds/fiorenzi.asc</ADDRESS><FONT=20
=
size=3D3><I>-------------------------------------------------------------=
------------<BR> &nb=
sp; =20
<B>"Faber est suae quisque fortunae"=20
=
</B><BR>-----------------------------------------------------------------=
--------</I></FONT>=20
=
</TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></BLOCKQUOTE></BODY><=
/HTML>
------=_NextPart_000_0015_01C3E4D3.6E69DD90--