[syslog-ng] [Bug 218] To include local*.* facility.level in the source of syslog-ng

[bugzilla at bugzilla.balabit.com]

https://bugzilla.balabit.com/show_bug.cgi?id=218





--- Comment #9 from kathi <jk_kathi1 at yahoo.com>  2013-02-04 19:59:29 ---
Syslog-ng debug output from the Sparse zone 

bash-3.00# /usr/local/sbin/syslog-ng -Fedv
Trying to open module; module='syslogformat', filename='/usr/local/lib/syslog-ng/libsyslogformat.so'
Trying to open module; module='basicfuncs', filename='/usr/local/lib/syslog-ng/libbasicfuncs.so'
Trying to open module; module='afsocket', filename='/usr/local/lib/syslog-ng/libafsocket.so'
Trying to open module; module='affile', filename='/usr/local/lib/syslog-ng/libaffile.so'
Trying to open module; module='afprog', filename='/usr/local/lib/syslog-ng/libafprog.so'
Trying to open module; module='afuser', filename='/usr/local/lib/syslog-ng/libafuser.so'
Trying to open module; module='dbparser', filename='/usr/local/lib/syslog-ng/libdbparser.so'
Trying to open module; module='csvparser', filename='/usr/local/lib/syslog-ng/libcsvparser.so'
Trying to open module; module='afstreams', filename='/usr/local/lib/syslog-ng/libafstreams.so'
Starting to read include file; filename='/usr/local/etc/scl.conf', depth='1'
Global value changed; define='scl-root', value='/usr/local/share/include/scl'
Global value changed; define='include-path', value='/usr/local/etc:/usr/local/share/include'
Starting to read include file; filename='/usr/local/etc/modules.conf', depth='2'
Global value changed; define='autoload-compiled-modules', value='0'
Trying to open module; module='syslogformat', filename='/usr/local/lib/syslog-ng/libsyslogformat.so'
Attempted to register the same plugin multiple times, ignoring; context='format', name='syslog'
Trying to open module; module='basicfuncs', filename='/usr/local/lib/syslog-ng/libbasicfuncs.so'
Attempted to register the same plugin multiple times, ignoring; context='template-func', name='echo'
Attempted to register the same plugin multiple times, ignoring; context='template-func', name='grep'
Attempted to register the same plugin multiple times, ignoring; context='template-func', name='if'
Trying to open module; module='afsocket', filename='/usr/local/lib/syslog-ng/libafsocket.so'
Attempted to register the same plugin multiple times, ignoring; context='source', name='unix-stream'
Attempted to register the same plugin multiple times, ignoring; context='destination', name='unix-stream'
Attempted to register the same plugin multiple times, ignoring; context='source', name='unix-dgram'
Attempted to register the same plugin multiple times, ignoring; context='destination', name='unix-dgram'
Attempted to register the same plugin multiple times, ignoring; context='source', name='tcp'
Attempted to register the same plugin multiple times, ignoring; context='destination', name='tcp'
Attempted to register the same plugin multiple times, ignoring; context='source', name='tcp6'
Attempted to register the same plugin multiple times, ignoring; context='destination', name='tcp6'
Attempted to register the same plugin multiple times, ignoring; context='source', name='udp'
Attempted to register the same plugin multiple times, ignoring; context='destination', name='udp'
Attempted to register the same plugin multiple times, ignoring; context='source', name='udp6'
Attempted to register the same plugin multiple times, ignoring; context='destination', name='udp6'
Attempted to register the same plugin multiple times, ignoring; context='source', name='syslog'
Attempted to register the same plugin multiple times, ignoring; context='destination', name='syslog'
Trying to open module; module='affile', filename='/usr/local/lib/syslog-ng/libaffile.so'
Attempted to register the same plugin multiple times, ignoring; context='source', name='file'
Attempted to register the same plugin multiple times, ignoring; context='source', name='pipe'
Attempted to register the same plugin multiple times, ignoring; context='destination', name='file'
Attempted to register the same plugin multiple times, ignoring; context='destination', name='pipe'
Trying to open module; module='afprog', filename='/usr/local/lib/syslog-ng/libafprog.so'
Attempted to register the same plugin multiple times, ignoring; context='source', name='program'
Attempted to register the same plugin multiple times, ignoring; context='destination', name='program'
Trying to open module; module='afuser', filename='/usr/local/lib/syslog-ng/libafuser.so'
Attempted to register the same plugin multiple times, ignoring; context='destination', name='usertty'
Trying to open module; module='dbparser', filename='/usr/local/lib/syslog-ng/libdbparser.so'
Attempted to register the same plugin multiple times, ignoring; context='parser', name='db-parser'
Trying to open module; module='csvparser', filename='/usr/local/lib/syslog-ng/libcsvparser.so'
Attempted to register the same plugin multiple times, ignoring; context='parser', name='csv-parser'
Finishing include; filename='/usr/local/etc/modules.conf', depth='2'
Starting to read include file; filename='/usr/local/share/include/scl/system/plugin.conf', depth='2'
Trying to open module; module='confgen', filename='/usr/local/lib/syslog-ng/libconfgen.so'
Finishing include; filename='/usr/local/share/include/scl/system/plugin.conf', depth='2'
Starting to read include file; filename='/usr/local/share/include/scl/pacct/plugin.conf', depth='2'
Finishing include; filename='/usr/local/share/include/scl/pacct/plugin.conf', depth='2'
Starting to read include file; filename='/usr/local/share/include/scl/syslogconf/plugin.conf', depth='2'
Trying to open module; module='confgen', filename='/usr/local/lib/syslog-ng/libconfgen.so'
Finishing include; filename='/usr/local/share/include/scl/syslogconf/plugin.conf', depth='2'
Finishing include; filename='/usr/local/etc/scl.conf', depth='1'
Trying to open module; module='afstreams', filename='/usr/local/lib/syslog-ng/libafstreams.so'
Attempted to register the same plugin multiple times, ignoring; context='source', name='sun-streams'
Trying to open module; module='afstreams', filename='/usr/local/lib/syslog-ng/libafstreams.so'
Attempted to register the same plugin multiple times, ignoring; context='source', name='sun-streams'
Finishing include; content='source confgen system', depth='1'
Syslog connection established; fd='6', server='AF_INET(10.62.61.4:514)', local='AF_INET(0.0.0.0:0)'
Running application hooks; hook='1'
Running application hooks; hook='3'
syslog-ng starting up; version='3.2.4'
Incoming log entry; line='<38>Feb  4 12:55:08 sshd[25832]: [ID 800047 auth.info] Accepted keyboard-interactive for wasadm from 10.58.97.235 port 61300
ssh2\x0a'
Initializing destination file writer; template='/var/adm/messages.0', filename='/var/adm/messages.0'
Incoming log entry; line='<38>Feb  4 12:55:08 sshd[25832]: [ID 800047 auth.info] Accepted keyboard-interactive for wasadm from 10.58.97.235 port 61300
ssh2\x0a'



It writes other events like sshd logins but not  application events that is using local0.info
I confirmed that the door file (/etc/.syslog_door ) is not shared  between the global and zone 
/etc is not inherited between the zones.

Kathi


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.