[syslog-ng] Another beginners problem

[Fegan, Joe]

> the reload fails, giving no kind of warning or message whatsoever

So in what sense does it fail?
________________________________
From: syslog-ng-bounces at lists.balabit.hu [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Andy Kannberg
Sent: 15 July 2009 15:45
To: syslog-ng at lists.balabit.hu
Subject: [syslog-ng] Another beginners problem

Hi folks,

I'm new to syslog-ng. I'm trying to get it running on a bunch of Ubuntu 8.04 LTS and OEL 5.3 systems.
For a start, I'm trying to get it working on 2 Ubuntu 8.04 LTS boxes.
What I want is that all logging of all systems is sent to a central loghost. Systems do not need to keep a local logfile.

So, I've shamelesly copied over a (as said working) config from another thread a few days ago on this list.
The client part works, at least, the reload goed ok. However, on the server, the reload fails, giving no kind of warning or message whatsoever to hint where the problem lies.

The configuration is as follows (With thanks to Siem Korteweg, from whom I copied the config over).

Client & server:

source s_internal { internal(); };

destination d_syslogng_log { file("/var/log/syslog-ng.log"); };

source s_local  {
                       unix-dgram("/dev/log");
                       file("/proc/kmsg" program_override("kernel:"));
               };

destination d_remote { tcp("10.0.13.152" port(514) ) ; };

destination d_local { file("/var/log/messages"); };

log { source( s_internal );     destination( d_remote ); };
log { source( s_internal );     destination( d_syslogng_log ); };
log { source( s_local );        destination( d_remote ); };
log { source( s_local );        destination( d_local ); };


On the central loghost, adittional lines are added:

source s_network { tcp (ip("10.0.13.152") port(514)); };

destination d_network   { file("/var/log/syslog-ng/hosts/$HOST_FROM/$R_YEAR/$R_MONTH/$R_YEAR-$R_MONTH-$R_DAY" create_dirs(yes)); };
log { source( s_network );      destination( d_network ); };

But, as said, a reload fails. Can someone help me out a little ?
Oh, I am running syslog-ng 3.03, installed from the .deb package available on the website of Balabit.

cheers and thanks in advance.

Andy

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20090715/a0751468/attachment.htm