[syslog-ng] syntax error in config-file

Pallagi Zoltán pzolee at balabit.hu
Tue Dec 15 10:43:10 CET 2009


Hi,

In syslog-ng 3.0, "syslog" became a reserved word and you have a 
destination and a filter called "syslog" in your config.
Please rename them and it will work

andip írta:
> Hi folks,
>
> I just tried updating syslog-ng to version 3.0.4, from 2.1.4. i use the
> gentoo linux-distro, and the new version came into "stable" gentoo a few days
> ago.
>
> I'm no syslog-ng expert, but i use it to log quite a few things, so my
> config-file it not default.
> I've read a bit in the admin-guide, but did not find any reason to my
> problem.
>
> i've tried converting my 2.1.4 config-file to the new 3.0.4 version, with no
> success. this is parts of my old config-file. ### are comments made to
> reflect changes i made for v2 -> v3 conversion
> ----------------------------------------------------------------------------
> options {
> 	chain_hostnames(off);		 ### changed this to "no"
> 	sync(0);			 ### changed this to "flush_lines"
> 	time_sleep(20);
> 	log_fifo_size (2048);
> 	create_dirs (yes);
> 	perm (0640);
> 	dir_perm (0750);
> 	stats(43200);			 ### changed this to "stats_freq"
> 	owner (syslogger);
> 	group (syslogger);
> 	perm (0664);
> };
>
> source sys {
>     unix-stream("/dev/log" max-connections(256));
>     internal();
>     file("/proc/kmsg");
> };
>
> source net { udp(); };
>
> destination clients	{ file ("/var/log/fwlogs/netclients/$HOST"); };
> destination console_all { file ("/dev/tty12"); };
> destination authlog	{ file ("/var/log/authlog");   };
> destination messages	{ file ("/var/log/messages"); };
> destination maillog	{ file ("/var/log/maillog"); };
> destination ipflog	{ file ("/var/log/ipflog"); };
> destination imaplog	{ file ("/var/log/imaplog"); };
> destination console	{ file ("/dev/console"); };
> destination syslog	{ file ("/var/log/syslog"); };		 ### changed to _syslog
>   

> destination komm	{ file ("/var/log/fwlogs/kommunikasjon-context.log");
> };
> destination asa 	{ file ("/var/log/fwlogs/asa.log"); };
> destination edb 	{ file ("/var/log/fwlogs/edb-pix.log"); };
> destination gje 	{ file ("/var/log/fwlogs/gjerdrum.log"); };
> destination nes 	{ file ("/var/log/fwlogs/nes.log"); };
> destination ull 	{ file ("/var/log/fwlogs/ullensaker.log"); };
> destination hur 	{ file ("/var/log/fwlogs/hurdal.log"); };
> destination eid 	{ file ("/var/log/fwlogs/eidsvoll.log"); };
> destination nan 	{ file ("/var/log/fwlogs/nannestad.log"); };
> destination datas	{ file ("/var/log/fwlogs/datasenter-context.log"); };
>
> destination mgmt	{ file ("/var/log/fwlogs/management-context.log"); };
>
> destination wifi	{ file ("/var/log/fwlogs/wifi-context.log"); };
> destination aplog	{ file ("/var/log/aplog/aplog.txt"); };
>
> filter aplog	{ host	(10.20.);	};	### this line caused the
> syntax error (line 35)
> filter gje	{ host	(10.8.30.28);	};
> filter nes	{ host	(10.8.30.20);	};
> filter ull	{ host	(10.8.30.36);	};
> filter hur	{ host	(10.8.30.12);	};
> filter eid	{ host	(10.8.30.44);	};
> filter nan	{ host	(10.8.30.52);	};
> filter datas	{ host	(10.8.0.1);	};
> filter mgmt	{ host	(10.8.30.60);	};
> filter wifi	{ host	(10.8.30.92);	};
> filter asa	{ host	(ASA-R111);	};
> filter komm	{ host	(10.8.30.76);	};
> filter edb	{ host	(edb-pix);	};
>
> filter emerg	{ level (emerg);	};
> filter alert	{ level (alert .. emerg);   };
> filter crit	{ level (crit .. emerg);    };
> filter err	{ level (err .. emerg);     };
> filter warning	{ level (warning .. emerg); };
> filter notice	{ level (notice .. emerg);  };
> filter info	{ level (info .. emerg);    };
> filter debug	{ level (debug .. emerg);   };
> filter kern	{ facility (kern);	};
> filter user	{ facility (user);	};
> filter mail	{ facility (mail);	};
> filter daemon	{ facility (daemon);	};
> filter auth	{ facility (auth);	};
> filter syslog	{ facility (syslog);	};
> filter lpr	{ facility (lpr);	};
> filter news	{ facility (news);	};
> filter uucp	{ facility (uucp);	};
> filter cron	{ facility (cron);	};
> #filter local0	{ facility (local0);	};
> #filter local1	{ facility (local1);	};
> #filter local2	{ facility (local2);	};
> #filter local3	{ facility (local3);	};
> #filter local4	{ facility (local4);	};
> #filter local5	{ facility (local5);	};
> #filter local6	{ facility (local6);	};
> #filter local7	{ facility (local7);	};
> filter user_none     { not facility (user);			};
> filter kern_debug    { filter (kern) and filter (debug);	};
> filter daemon_notice { filter (daemon) and filter (notice);	};
> filter mail_crit     { filter (mail) and filter (crit); 	};
> filter mesg	     { filter (kern_debug) or
> 		       filter (daemon_notice) or
> 		       filter (mail_crit);			};
> filter authinfo      { filter (auth) or program (sudo); 	};
>
> log { source (sys);			destination(messages); };
> log { source (sys);			destination(console_all); };
> log { source (sys); filter (authinfo);	destination (authlog);	};
> log { source (sys); filter (mail);	destination (maillog);	};
> #log { source (sys); filter (local0);	 destination (ipflog);	 };
> #log { source (sys); filter (local1);	 destination (imaplog);  };
> log { source (sys); filter (syslog);	destination (syslog);	};
> log { source (sys); filter (emerg); filter (user_none);
> 					destination (console);	};
> log { source (sys); filter (mesg); filter (user_none);
> 					destination (messages); };
>
> log { source (net);			destination (clients); };
> log { source (net); filter (komm);	destination (komm);   };
> log { source (net); filter (asa);	destination (asa);    };
> log { source (net); filter (mgmt);	destination (mgmt);   };
> log { source (net); filter (wifi);	destination (wifi);   };
> log { source (net); filter (datas);	destination (datas);  };
> log { source (net); filter (wifi);	destination (wifi);   };
> log { source (net); filter (gje);	destination (gje);    };
> log { source (net); filter (nan);	destination (nan);    };
> log { source (net); filter (ull);	destination (ull);    };
> log { source (net); filter (hur);	destination (hur);    };
> log { source (net); filter (eid);	destination (eid);    };
> log { source (net); filter (nes);	destination (nes);    };
> log { source (net); filter (edb);	destination (edb);    };
> log { source (net); filter (aplog);	destination (aplog);  };
> #log { source (net); filter (komm); destination (komm); };
> ----------------------------------------------------------------------
> This is the error i got :
>
> syntax error in /etc/syslog-ng/syslog-ng.conf at line 35.
>
> syslog-ng documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> mailing list: https://lists.balabit.hu/mailman/listinfo/syslog-ng	     
> 	  
>  * Configuration error. Please fix your configfile
> (/etc/syslog-ng/syslog-ng.conf)
>
> It is not a very big deal at the moment, as i've reverted back to version
> 2.1.4, but i'd like to keep my system current, and somewhat up to date. this
> server's main function is as a syslogger for a few firewalls though, so i
> cannot leave it unable to log for long.
>
> hope someone can help.
>
> cheers
> andip
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
>
>
>   



More information about the syslog-ng mailing list