[syslog-ng] fails if dns error resolve hostnamedestinationforwarding

JV nycfresh at yahoo.com
Tue Nov 11 22:22:44 CET 2008


no, here's my options.

options { sync (0);
          time_reopen (10);
          log_fifo_size (1000);
          long_hostnames (off);
          use_dns (no);
          use_fqdn (no);
          create_dirs (no);
          keep_hostname (yes);
stats (0);
        }

PS: it doesn't seem to matter if the destination is a "hostname" or "hostname.FQDN" if syslog-ng can't resolve it - it won't run , so shouldn't be Redhat dependant either :)

--- On Tue, 11/11/08, Peck, Jonathan <Jonathan.Peck at firstdata.com> wrote:

> From: Peck, Jonathan <Jonathan.Peck at firstdata.com>
> Subject: RE: [syslog-ng] fails if dns error resolve hostnamedestinationforwarding
> To: nycfresh at yahoo.com, "Syslog-ng users' and developers' mailing list" <syslog-ng at lists.balabit.hu>
> Date: Tuesday, November 11, 2008, 12:56 PM
> Well there's your problem, you are using RedHat, haha
> j/k :) 
> 
> Do you have any dns fqdn options set in your syslog.conf.in
> (or
> syslog.conf.RedHat) such:
> 
> options { long_hostnames (on);
>           use_dns (yes);
>           use_fqdn (yes);
>           keep_hostname (no);
>         };
> 
> ?
> 
> -----Original Message-----
> From: syslog-ng-bounces at lists.balabit.hu
> [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of JV
> Sent: Tuesday, November 11, 2008 2:45 PM
> To: Syslog-ng users' and developers' mailing list;
> Peck, Jonathan
> Subject: Re: [syslog-ng] fails if dns error resolve
> hostnamedestinationforwarding
> 
> thanks for the quick response. 
> 
> i'm using the default contrib/syslog-ng.conf.RedHat 
> 
> source s_sys { file ("/proc/kmsg"
> log_prefix("kernel: ")); unix-stream
> ("/dev/log"); internal(); };
> 
> /usr/local/sbin/syslog-ng -d -v
> Error resolving hostname; host='sysremote'
> No destination address set;
> 
> 
> 
> --- On Tue, 11/11/08, Peck, Jonathan
> <Jonathan.Peck at firstdata.com>
> wrote:
> 
> > From: Peck, Jonathan
> <Jonathan.Peck at firstdata.com>
> > Subject: RE: [syslog-ng] fails if dns error resolve
> hostname
> destinationforwarding
> > To: nycfresh at yahoo.com, "Syslog-ng users' and
> developers' mailing
> list" <syslog-ng at lists.balabit.hu>
> > Date: Tuesday, November 11, 2008, 12:29 PM
> > How do you have your sources section configured? 
> > 
> > Have you run syslog-ng in debug mode (#syslog-ng -d
> -v) to
> > see if it is
> > vomiting back any addtl info when it trys to kick off?
> 
> > 
> > -----Original Message-----
> > From: syslog-ng-bounces at lists.balabit.hu
> > [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf
> Of
> > JV
> > Sent: Tuesday, November 11, 2008 2:23 PM
> > To: syslog-ng at lists.balabit.hu
> > Subject: [syslog-ng] fails if dns error resolve
> hostname
> > destinationforwarding
> > 
> > Tried searching in google and the mailing archives...
> > 
> > I'm on syslog-ng-2.0.9 and it refuses to start if
> i
> > have a filter like
> > 
> > filter f_11 {         level(info..emerg); };
> > destination d_8 {    udp("sysremote"
> port(514)); 
> > };
> > log { source(s_sys); filter(f_11); destination(d_8);
> };
> > 
> > and sysremote is not resolvable via my DNS or
> /etc/hosts 
> > 
> > You'd think syslog-ng-2.0.9 would continue to run
> and
> > do the other
> > filters which is to log locally instead of refusing to
> run
> > at all. Thats
> > how the builtin syslog works i believe.
> > 
> > This limits our ability to swap out replace syslog
> with
> > syslog-ng since
> > local logging should not fail just because dns is
> > unreachable ?
> > 
> > Am I missing something. Thanks in advance.
> > 
> > 
> > 
> > 
> > 
> >       
> >
> ________________________________________________________________________
> > ______
> > Member info:
> > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > Documentation:
> >
> http://www.balabit.com/support/documentation/?product=syslog-ng
> > FAQ: http://www.campin.net/syslog-ng/faq.html
> > 
> > 
> > -----------------------------------------
> > The information in this message may be proprietary
> and/or
> > confidential, and protected from disclosure.  If the
> reader
> > of this
> > message is not the intended recipient, or an employee
> or
> > agent
> > responsible for delivering this message to the
> intended
> > recipient,
> > you are hereby notified that any dissemination,
> > distribution or
> > copying of this communication is strictly prohibited.
> If
> > you have
> > received this communication in error, please notify
> First
> > Data
> > immediately by replying to this message and deleting
> it
> > from your
> > computer.
> 
> 
>       
> ________________________________________________________________________
> ______
> Member info:
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html


      


More information about the syslog-ng mailing list