[syslog-ng] cnnection 0 desn't have any source
wayne yu
zwyu7319 at yahoo.com
Mon May 8 21:02:50 CEST 2006
Hi everyone:
I got waning message when I starting my syslog :
Warning: connection 0 doesn't have any sources
and I don't how to fixing it.
can someone look at my /etc/syslog-ng.conf and tell me
how to fixing it.
# Options
options {
use_fqdn(yes);
sync(0);
keep_hostname(yes);
chain_hostnames(no);
create_dirs(yes);
};
# Sources of syslog messages (both local and remote
messages on the server)
source s_local {
sun-streams("/dev/log"
door("/etc/.syslog_door"));
internal();
};
source s_stunnel {
tcp(ip("127.0.0.1")
port(514)
max-connections(1));
};
source s_udp { udp(); };
# Level Filters
filter f_emerg { level (emerg); };
filter f_alert { level (alert .. emerg); };
filter f_crit { level (crit .. emerg); };
filter f_err { level (err .. emerg); };
filter f_warning { level (warning .. emerg); };
filter f_notice { level (notice .. emerg); };
filter f_info { level (info .. emerg); };
filter f_debug { level (debug .. emerg); };
# Facility Filters
filter f_kern { facility (kern); };
filter f_user { facility (user); };
filter f_mail { facility (mail); };
filter f_daemon { facility (daemon); };
filter f_auth { facility (auth); };
filter f_syslog { facility (syslog); };
filter f_lpr { facility (lpr); };
filter f_news { facility (news); };
filter f_uucp { facility (uucp); };
filter f_cron { facility (cron); };
filter f_local0 { facility (local0); };
filter f_local1 { facility (local1); };
filter f_local2 { facility (local2); };
filter f_local3 { facility (local3); };
filter f_local4 { facility (local4); };
filter f_local5 { facility (local5); };
filter f_local6 { facility (local6); };
filter f_local7 { facility (local7); };
# Custom Filters
filter f_user_none { not facility (user);
};
filter f_kern_debug { filter (f_kern) and filter
(f_debug); };
filter f_daemon_notice { filter (f_daemon) and filter
(f_notice); };
filter f_mail_crit { filter (f_mail) and filter
(f_crit); };
filter f_mesg { filter (f_kern_debug) or
filter (f_daemon_notice) or
filter (f_mail_crit);
};
filter f_authinfo { filter (f_auth) or program
(sudo); };
destination hosts {
file("/var/log/HOSTS/$HOST/$YEAR/$MONTH/$DAY/$FACILITY$YEAR$MONTH$DAY"
owner(root) group(root) perm(0600) dir_perm(0700)
create_dirs(yes));
};
#Destinations: local files, the console, and the
client files
destination l_authlog { file ("/var/log/authlog");
};
destination l_messages { file ("/var/log/messages");
};
destination l_maillog { file ("/var/log/maillog");
};
destination l_ipflog { file ("/var/log/ipflog");
};
destination l_imaplog { file ("/var/log/imaplog");
};
destination l_syslog { file ("/var/log/syslog");
};
destination l_console { file ("/dev/console");
};
destination r_authlog { file
("/var/log/clients/$YEAR/$MONTH/$HOST/authlog");
};
destination r_messages { file
("/var/log/clients/$YEAR/$MONTH/$HOST/messages");
};
destination r_maillog { file
("/var/log/clients/$YEAR/$MONTH/$HOST/maillog");
};
destination r_ipflog { file
("/var/log/clients/$YEAR/$MONTH/$HOST/ipflog");
};
destination r_imaplog { file
("/var/log/clients/$YEAR/$MONTH/$HOST/imaplog");
};
destination r_console { file
("/var/log/clients/$YEAR/$MONTH/$HOST/consolelog");
};
destination r_syslog { file
("/var/log/clients/$YEAR/$MONTH/$HOST/syslog");
};
destination r_fallback { file
("/var/log/clients/$YEAR/$MONTH/$HOST/$FACILITY-$LEVEL");
};
destination mail-alert-perl {
program("/usr/local/bin/syslog-mail-perl"); };
filter f_attack_alert {
match("attackalert");
};
# find messages with "attackalert" in them, and send
to the mail-alert script
log {
#source(src);
filter(f_attack_alert);
destination(mail-alert-perl);
};
# Log statements
# Local sources
log { source (s_local); filter (f_authinfo);
destination (l_authlog); };
log { source (s_local); filter (f_mail);
destination (l_maillog); };
log { source (s_local); filter (f_local0);
destination (l_ipflog); };
log { source (s_local); filter (f_local1);
destination (l_imaplog); };
log { source (s_local); filter (f_syslog);
destination (l_syslog); };
log { source (s_local); filter (f_emerg); filter
(f_user_none);
destination (l_console); };
log { source (s_local); filter (f_mesg); filter
(f_user_none);
destination (l_messages); };
# All sources, since we want to archive local and
remote logs
log { source (s_local); source (s_stunnel); filter
(f_authinfo);
destination (r_authlog); };
log { source (s_local); source (s_stunnel); filter
(f_mail);
destination (r_maillog); };
log { source (s_local); source (s_stunnel); filter
(f_local0);
destination (r_ipflog); };
log { source (s_local); source (s_stunnel); filter
(f_local1);
destination (r_imaplog); };
log { source (s_local); source (s_stunnel); filter
(f_syslog);
destination (r_syslog); };
log { source (s_local); source (s_stunnel); filter
(f_emerg);
filter (f_user_none);
destination (l_console); };
log { source (s_local); source (s_stunnel); filter
(f_mesg);
filter (f_user_none);
destination (l_messages); };
Thanks in advance.
Wayne Yu
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
More information about the syslog-ng
mailing list