[syslog-ng] Another beginners problem

Sandor Geller Sandor.Geller at morganstanley.com
Wed Jul 15 18:23:36 CEST 2009


Try syslog-ng -f <configfile> -s , if there's an obvious error it will show.

On Wed, Jul 15, 2009 at 4:59 PM, Andy Kannberg<andy.kannberg at gmail.com> wrote:
> Hello Siem,
>
> Woah, that is a quick response...!
> Anyway, it didn't give any line when it reported the fail.
>
>
> cheers,
> Andy
>
> 2009/7/15 Siem Korteweg <Siem.Korteweg at qnh.nl>
>>
>> Andy,
>>
>> which line of your server config is reported when the reload fails?
>>
>> regards,
>>
>> Siem Korteweg
>>
>>
>> -----Oorspronkelijk bericht-----
>> Van: syslog-ng-bounces at lists.balabit.hu namens Andy Kannberg
>> Verzonden: wo 15-7-2009 16:45
>> Aan: syslog-ng at lists.balabit.hu
>> Onderwerp: [syslog-ng] Another beginners problem
>>
>> Hi folks,
>>
>> I'm new to syslog-ng. I'm trying to get it running on a bunch of Ubuntu
>> 8.04
>> LTS and OEL 5.3 systems.
>> For a start, I'm trying to get it working on 2 Ubuntu 8.04 LTS boxes.
>> What I want is that all logging of all systems is sent to a central
>> loghost.
>> Systems do not need to keep a local logfile.
>>
>> So, I've shamelesly copied over a (as said working) config from another
>> thread a few days ago on this list.
>> The client part works, at least, the reload goed ok. However, on the
>> server,
>> the reload fails, giving no kind of warning or message whatsoever to hint
>> where the problem lies.
>>
>> The configuration is as follows (With thanks to Siem Korteweg, from whom I
>> copied the config over).
>>
>> Client & server:
>>
>> source s_internal { internal(); };
>>
>> destination d_syslogng_log { file("/var/log/syslog-ng.log"); };
>>
>> source s_local  {
>>                       unix-dgram("/dev/log");
>>                       file("/proc/kmsg" program_override("kernel:"));
>>               };
>>
>> destination d_remote { tcp("10.0.13.152" port(514) ) ; };
>>
>> destination d_local { file("/var/log/messages"); };
>>
>> log { source( s_internal );     destination( d_remote ); };
>> log { source( s_internal );     destination( d_syslogng_log ); };
>> log { source( s_local );        destination( d_remote ); };
>> log { source( s_local );        destination( d_local ); };
>>
>>
>> On the central loghost, adittional lines are added:
>>
>> source s_network { tcp (ip("10.0.13.152") port(514)); };
>>
>> destination d_network   {
>>
>> file("/var/log/syslog-ng/hosts/$HOST_FROM/$R_YEAR/$R_MONTH/$R_YEAR-$R_MONTH-$
>> R_DAY"
>> create_dirs(yes)); };
>> log { source( s_network );      destination( d_network ); };
>>
>> But, as said, a reload fails. Can someone help me out a little ?
>> Oh, I am running syslog-ng 3.03, installed from the .deb package available
>> on the website of Balabit.
>>
>> cheers and thanks in advance.
>>
>> Andy
>>
>>
>>
>> ______________________________________________________________________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation:
>> http://www.balabit.com/support/documentation/?product=syslog-ng
>> FAQ: http://www.campin.net/syslog-ng/faq.html
>>
>>
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
>
>
>


More information about the syslog-ng mailing list