[syslog-ng]receiving external events

Andrew Gray syslog-ng@lists.balabit.hu
Sun, 25 Jan 2004 19:45:21 +0700


This is a multi-part message in MIME format.

------=_NextPart_000_000F_01C3E37B.EB252AF0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

Philip,

you may not be aware that the record sent to syslog is not a simple text
string. It
has the priority/facility encoded within "<>" at the front of the record. If
you're not
including this it's possible that syslog-ng is simply discarding it.

You can see this format by setting up a program target (say a simple shell
script) to 
capture the raw output.

-----Original Message-----
From: syslog-ng-admin@lists.balabit.hu
[mailto:syslog-ng-admin@lists.balabit.hu]On Behalf Of Wang, Philip R.
Sent: Friday, January 23, 2004 9:32 PM
To: syslog-ng@lists.balabit.hu
Subject: [syslog-ng]receiving external events



I am new to syslog-ng.  I used the following config file to test it out
under Solaris.
Then I used a pc application to generate udp message to port 514.

I started the process using "syslog-ng -f filename".

I can see log message in "messages" indicating the process started.

However, when I send the simulated message from my PC app.  It does not show
up in the log file.

I was reading some Linux syslog-ng document: an chapter from a book.  It
mentioned using the '-r' option to allow accepting remote
message.  I have syslog 1.6.1 and it does not have this option.  Not sure if
I missed anything?

Philip

---------------------------------------------------------------------
source local { internal(); udp();};

destination all { file("/opt/syslog-ng/messages"); };

log { source(local); destination(all); };
-----------------------------------------------------------------------
_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html


------=_NextPart_000_000F_01C3E37B.EB252AF0
Content-Type: application/ms-tnef;
	name="winmail.dat"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="winmail.dat"

eJ8+IhoMAQaQCAAEAAAAAAABAAEAAQeQBgAIAAAAagMAAAAAAABtAAEIgAcAGAAAAElQTS5NaWNy
b3NvZnQgTWFpbC5Ob3RlADEIAQ2ABAACAAAAAgACAAEGgAMADgAAANQHAQAZABMALQAAAAAANQEB
A5AGAGQJAAAoAAAACwACAAEAAAALACMAAAAAAAMAJgAAAAAACwApAAAAAAADAC4AAAAAAAMANgAA
AAAAHgBwAAEAAAAlAAAAW3N5c2xvZy1uZ11yZWNlaXZpbmcgZXh0ZXJuYWwgZXZlbnRzAAAAAAIB
cQABAAAAFgAAAAHD4yPlmCvDy/KWuU3amCdeW8XsmaIAAAIBHQwBAAAAFwAAAFNNVFA6QU5EUkVX
QEFSR1JBWS5PUkcAAAsAAQ4AAAAAQAAGDgAuZAtB48MBAgEKDgEAAAAYAAAAAAAAAFHGG6w52odB
gSdqbyW2BtXCgAAAAwAUDgEAAAALAB8OAQAAAAIBCRABAAAA8QQAAO0EAACdCAAATFpGdYO811kD
AAoAcmNwZzEyNeIyA0N0ZXgFQQEDAff/CoACpAPkBxMCgA/zAFAEVj8IVQeyESUOUQMBAgBjaOEK
wHNldDIGAAbDESX2MwRGE7cwEiwRMwjvCfe2OxgfDjA1ESIMYGMAUDMLCQFkMzYWUAumIFB2aAMQ
BSAsCqIKhAqAeYUIYCAAwHkgbm8FQGBiZSBhdwrAHvB0PxPgBUAfcB7wGCAFoWQglxQQAjAfYG8g
YHlzF7DsZyAEAB6TYSBgB3ALUBMfUQ7Cc3QFEG5nLnggSXQdZBPgBCAfwnCDBRAFsGl0eS9mAND7
HREkkCAJ8AWgAQAgUAPwgx9wC4AgIjw+Ih8A5x+kA1EgkW9mH7kjESdwvR4hJx9BHqEdZAuAYwpA
XmQi4R9hIWEkgCcEIHC6bwQQaQJgH1Ug9C0p8f8hYSHzHoAp0ATwCxEp4iSA+i4dalkeMS0QA6AU
EB9SeyFhAhByAMAewR6AFBF0OSnidXAhwSQwITByYRZtH2AKwGcUICAoc2secSHXcx/QbAMgBPQp
/yCyHWQtEAUwCHAfUh/hHxCxJ1B1dHA1UC27LTZy+k8FEGcLgAdABdAHkDIAVzGwNnMdZEYDYTor
mC1oYWRtC4BAHSAisHNcLmIHQAGgLZFoHkBbNwDAAxAgwDo43zntXU+pA6BCZRPgbCdwTydw8lcA
cGcsHOUH8C21BmBnAjA4sDhwaWQecD6ASs0AcHUKwB6AMjM+gAHQQDA0IDk6MxRAUHpNHWRUO0Ar
mDxfPzV1rGJqBZA/wVsrp10gAXhlaXYp4g7BBJE3IWXadiCBcx1qHWpJHwAxYP5uB9EgxywBIxAj
IDCgFBB/IFAmwwbwF7AD8CnxBaBu/mY24CbwAxAfUSDQDrAisPcqYTUyMKBuBIEGAAbwCsB7BAAt
tVQf0AOgSmUw4WP9HwBwC1AN4B+QJFADoCDB3zGwSTAxQA6wMKBkMMAHgQ83giCyKsAAICA1MTT/
LbtI4CKwCsAOsEq0MQFF8NcEEUqAKeIiK6gtJ3BMIvs3EAeAIlKtLsYhIlF2JhL9UXVzJnALgCnQ
UAIp81Q4W1OVLbtIS1BHAXI+gHfvTrQgcUq0IfF1C2BT0lF25wNSHlAegFBDT6JKMgVA/GRvB5Ee
ojLQS1AwoiYR/x/CISJMIlKtHyAEIBggPAAtKeJzA3Ae8EwLgHV48yuZYFBjdQeAP7IDkRPRnwUw
EoFfEyHQBuBva1/0H2WSUDEloVTUH8InLXJ+JydQBTBQNQdAS0EfAGP/RfBpUSnxGCAEYA6wHWRR
dQ9KMxPgRxAg5jEuNi7+MWXhIFBM8WBXbGMqI2lE/UoxTmCyNIIGkEpRPCAEEMlPMm55JfJnPx1q
HPT/Nb9zv3TPdd92ux1kZAAIcG9F8FgBLRADIXtYwUaUKMwpO1EieaFcfRkwHXl/AQAisDcBUCNp
4XjiTCIo1CIvaUEvK6cvWRd5se96TSEiePF4JCh4k3mxezn+KGnhfkp2v4N/hI+Fnzfn/l+HT4hf
iSp3xSu3OvI50l1KQC1KQEKfQ61oAkBw8HM6Ly853n2gOwEDgZ+OcwuAAhB9CDgWZXEKUPcCMCyx
I8BrJaGRwXtRAiCvBCAfkY4CjlF3k+AuLRC7IhALgC5JMHz6JMBxOqAsdG0YAB15fZbAAAAAHgBC
EAEAAABCAAAAPDY5Rjc1QjkxODg1RjIwNDM5ODNBOTdEODFCMDc2OUMzMDIyNDZFMDZAbnhjbG1l
eDMudXMubmV4dGVsLmNvbT4AAAADAAlZAQAAAAMABYAIIAYAAAAAAMAAAAAAAABGAAAAAFKFAABp
eQEAHgAGgAggBgAAAAAAwAAAAAAAAEYAAAAAVIUAAAEAAAAEAAAAOS4wAAsAB4AIIAYAAAAAAMAA
AAAAAABGAAAAAAOFAAAAAAAAAwAIgAggBgAAAAAAwAAAAAAAAEYAAAAAEIUAAAAAAAADAAmACCAG
AAAAAADAAAAAAAAARgAAAAABhQAAAAAAAAsACoAIIAYAAAAAAMAAAAAAAABGAAAAAAaFAAAAAAAA
CwALgAggBgAAAAAAwAAAAAAAAEYAAAAADoUAAAAAAAADAAyACCAGAAAAAADAAAAAAAAARgAAAAAR
hQAAAAAAAAMADYAIIAYAAAAAAMAAAAAAAABGAAAAABiFAAAAAAAAHgAPgAggBgAAAAAAwAAAAAAA
AEYAAAAANoUAAAEAAAABAAAAAAAAAB4AEIAIIAYAAAAAAMAAAAAAAABGAAAAADeFAAABAAAAAQAA
AAAAAAAeABGACCAGAAAAAADAAAAAAAAARgAAAAA4hQAAAQAAAAEAAAAAAAAAAgH4DwEAAAAQAAAA
UcYbrDnah0GBJ2pvJbYG1QIB+g8BAAAAEAAAAFHGG6w52odBgSdqbyW2BtUCAfsPAQAAAEkAAAAA
AAAAOKG7EAXlEBqhuwgAKypWwgAAbXNwc3QuZGxsAAAAAABOSVRB+b+4AQCqADfZbgAAAEg6XE1h
aWxcbWFpbGJveC5wc3QAAAAAAwD+DwUAAAADAA00/TcAAAIBfwABAAAAMQAAADAwMDAwMDAwNTFD
NjFCQUMzOURBODc0MTgxMjc2QTZGMjVCNjA2RDVBNDMxNDQwMAAAAAADAAYQP5j7DwMABxBqBQAA
AwAQEAAAAAADABEQAAAAAB4ACBABAAAAZQAAAFBISUxJUCxZT1VNQVlOT1RCRUFXQVJFVEhBVFRI
RVJFQ09SRFNFTlRUT1NZU0xPR0lTTk9UQVNJTVBMRVRFWFRTVFJJTkdJVEhBU1RIRVBSSU9SSVRZ
L0ZBQ0lMSVRZRU5DT0QAAAAAkmU=

------=_NextPart_000_000F_01C3E37B.EB252AF0--