[syslog-ng] Another beginners problem

[Siem Korteweg]

Andy,

which line of your server config is reported when the reload fails?

regards,

Siem Korteweg


-----Oorspronkelijk bericht-----
Van: syslog-ng-bounces at lists.balabit.hu namens Andy Kannberg
Verzonden: wo 15-7-2009 16:45
Aan: syslog-ng at lists.balabit.hu
Onderwerp: [syslog-ng] Another beginners problem
 
Hi folks,

I'm new to syslog-ng. I'm trying to get it running on a bunch of Ubuntu 8.04
LTS and OEL 5.3 systems.
For a start, I'm trying to get it working on 2 Ubuntu 8.04 LTS boxes.
What I want is that all logging of all systems is sent to a central loghost.
Systems do not need to keep a local logfile.

So, I've shamelesly copied over a (as said working) config from another
thread a few days ago on this list.
The client part works, at least, the reload goed ok. However, on the server,
the reload fails, giving no kind of warning or message whatsoever to hint
where the problem lies.

The configuration is as follows (With thanks to Siem Korteweg, from whom I
copied the config over).

Client & server:

source s_internal { internal(); };

destination d_syslogng_log { file("/var/log/syslog-ng.log"); };

source s_local  {
                       unix-dgram("/dev/log");
                       file("/proc/kmsg" program_override("kernel:"));
               };

destination d_remote { tcp("10.0.13.152" port(514) ) ; };

destination d_local { file("/var/log/messages"); };

log { source( s_internal );     destination( d_remote ); };
log { source( s_internal );     destination( d_syslogng_log ); };
log { source( s_local );        destination( d_remote ); };
log { source( s_local );        destination( d_local ); };


On the central loghost, adittional lines are added:

source s_network { tcp (ip("10.0.13.152") port(514)); };

destination d_network   {
file("/var/log/syslog-ng/hosts/$HOST_FROM/$R_YEAR/$R_MONTH/$R_YEAR-$R_MONTH-$
R_DAY"
create_dirs(yes)); };
log { source( s_network );      destination( d_network ); };

But, as said, a reload fails. Can someone help me out a little ?
Oh, I am running syslog-ng 3.03, installed from the .deb package available
on the website of Balabit.

cheers and thanks in advance.

Andy

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/ms-tnef
Size: 3630 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20090715/425cc576/attachment.bin