[syslog-ng] Another beginners problem

[Andy Kannberg]

It said FAIL in capital red lettlers.
However, restarting the syslog-ng daemon went ok. Reloading again also went
ok. So, I guess that problem is solved. However, I have no clue why it
failed.
I've checked overnight, and the logging works like a charm now.

cheers & thanks for the fast response !

Andy




2009/7/15 Fegan, Joe <Joe.Fegan at hp.com>

>  > the reload fails, giving no kind of warning or message whatsoever
>
> So in what sense does it fail?
>  ------------------------------
> *From:* syslog-ng-bounces at lists.balabit.hu [mailto:
> syslog-ng-bounces at lists.balabit.hu] *On Behalf Of *Andy Kannberg
> *Sent:* 15 July 2009 15:45
> *To:* syslog-ng at lists.balabit.hu
> *Subject:* [syslog-ng] Another beginners problem
>
> Hi folks,
>
> I'm new to syslog-ng. I'm trying to get it running on a bunch of Ubuntu
> 8.04 LTS and OEL 5.3 systems.
> For a start, I'm trying to get it working on 2 Ubuntu 8.04 LTS boxes.
> What I want is that all logging of all systems is sent to a central
> loghost. Systems do not need to keep a local logfile.
>
> So, I've shamelesly copied over a (as said working) config from another
> thread a few days ago on this list.
> The client part works, at least, the reload goed ok. However, on the
> server, the reload fails, giving no kind of warning or message whatsoever to
> hint where the problem lies.
>
> The configuration is as follows (With thanks to Siem Korteweg, from whom I
> copied the config over).
>
> Client & server:
>
> source s_internal { internal(); };
>
> destination d_syslogng_log { file("/var/log/syslog-ng.log"); };
>
> source s_local  {
>                        unix-dgram("/dev/log");
>                        file("/proc/kmsg" program_override("kernel:"));
>                };
>
> destination d_remote { tcp("10.0.13.152" port(514) ) ; };
>
> destination d_local { file("/var/log/messages"); };
>
> log { source( s_internal );     destination( d_remote ); };
> log { source( s_internal );     destination( d_syslogng_log ); };
> log { source( s_local );        destination( d_remote ); };
> log { source( s_local );        destination( d_local ); };
>
>
> On the central loghost, adittional lines are added:
>
> source s_network { tcp (ip("10.0.13.152") port(514)); };
>
> destination d_network   {
> file("/var/log/syslog-ng/hosts/$HOST_FROM/$R_YEAR/$R_MONTH/$R_YEAR-$R_MONTH-$R_DAY"
> create_dirs(yes)); };
> log { source( s_network );      destination( d_network ); };
>
> But, as said, a reload fails. Can someone help me out a little ?
> Oh, I am running syslog-ng 3.03, installed from the .deb package available
> on the website of Balabit.
>
> cheers and thanks in advance.
>
> Andy
>
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20090716/5152495d/attachment.htm