[syslog-ng] Multiple woes with sles10sp1 / syslog-ng-1.6.8-20.18

[Robin P. Blanchard]

# syslog-ng -d -f /etc/syslog-ng/syslog-ng.conf

[snip]

Cannot open file /export/syslog/10.10.0.2102007/08/21/messages for writing
(Permission denied)

# ls -ald /export/ ; ls -ald /export/syslog/
drwxr-xr-x 5 root root 4096 Aug 21 10:16 /export/
drwxrwsr-x 2 root root 4096 Aug 21 09:41 /export/syslog/

# fgrep "\$HOST" /etc/syslog-ng/syslog-ng.conf |fgrep messages
destination localmessages {
file("/export/syslog/$HOST/$YEAR/$MONTH/$DAY/localmessages"); };
destination messages {
file("/export/syslog/$HOST/$YEAR/$MONTH/$DAY/messages"); };
#destination allmessages {
file("/export/syslog/$HOST/$YEAR/$MONTH/$DAY/allmessages"); };



So...it would apppear that:
1) macro expansion is not working ? (I can hand hack-in an extra "/" to force
that path to look correct)
2) syslog-ng cannot write to its output dir (regardless if I hack in that
extra "/"


Ideas ?

# uname -a
Linux auth 2.6.16.46-0.14-default #1 Thu May 17 14:00:09 UTC 2007 i686 i686
i386 GNU/Linux

# rpm -qa |fgrep -i syslog
syslog-ng-1.6.8-20.18

---------------------------------------
Robin P. Blanchard
Systems Integration Specialist
The University of Georgia
Center for Continuing Education
Conference Center & Hotel
fon: 706.542.2404 < > fax: 706.542.1587
---------------------------------------