[syslog-ng] Help on syslog-ng

[FELLMANN Eric (EXT)]

Hello,

I have install syslog-ng on solaris 10(machine A],it configured as log
proxy server

more /etc/syslog-ng/syslog-ng.conf
options {
chain_hostnames(no);
keep_hostname(yes);
use_fqdn(yes);
log_fifo_size(1000);
};

source local {
sun-stream("/dev/log");
udp(ip(0.0.0.0) port(514));
internal();
};

filter notdebug {
level(info...emerg);
};

destination ercmas13.eurocontrol.fr{
udp("ercmas13.eurocontrol.fr" port (514));
};
log {
source(local);
filter (notdebug);
destination(ercmas13.eurocontrol.fr);
};

A client (Machine C) on solaris 10 send logs on (Machine A)
I say the log on ercmas13 (logs server)

A client (Machine B) on redhat 4 send log on (Machine B)
I have nothing on the log server


I change this information in this files syslog-ng.conf on log proxy
server

Each possible communication mechanism has a corresponding source driver
in syslog-ng. For example, to
open a unix socket with SOCK_DGRAM style communication use the driver
unix-dgram. The same socket using
the SOCK_STREAM style - as used under Linux - is called unix-stream.

source local {
unix-stream("/dev/log");
udp(ip(0.0.0.0) port(514));
internal();
};

But when i restart le syslog-ng on log proxy server

/etc/init.d/syslog-ng start

syslog-ng service starting.
Error binding socket; addr='AF_UNIX(/dev/log)', error='Address already
in use (125)'
Error initializing source driver; source='local'

What is the problem ?


Best regards

Eric FELLMANN 



____

This message and any files transmitted with it are legally privileged and intended for the sole use of the individual(s) or entity to whom they are addressed. If you are not the intended recipient, please notify the sender by reply and delete the message and any attachments from your system. Any unauthorised use or disclosure of the content of this message is strictly prohibited and may be unlawful.

Nothing in this e-mail message amounts to a contractual or legal commitment on the part of EUROCONTROL, unless it is confirmed by appropriately signed hard copy.

Any views expressed in this message are those of the sender.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20080620/8bae1ad4/attachment.htm