[syslog-ng] syslog-ng redis destination problem

[jrhendri at roadrunner.com]

Hi all -

Not sure what changed, but I rebuilt the latest syslog-ng - used the same syslog-ng.conf file (ignored the version warnings) and the HINCRBY command now works. 

Here are the particulars:

[root at VDDP13E-F1A47ED n0142566]# /usr/local/sbin/syslog-ng --version
syslog-ng 3.6.0alpha2
Installer-Version: 3.6.0alpha2
Revision: 
Compile-Date: Aug 12 2014 13:36:07
Available-Modules: afsocket-notls,afprog,csvparser,system-source,dbparser,redis,syslogformat,afuser,afstomp,afmongodb,linux-kmsg-format,json-plugin,basicfuncs,pseudofile,afamqp,affile,cryptofuncs,afsocket,confgen
Enable-Debug: off
Enable-GProf: off
Enable-Memtrace: off
Enable-IPv6: on
Enable-Spoof-Source: off
Enable-TCP-Wrapper: off
Enable-Linux-Caps: off

Thanks,
Jim



---- jrhendri at roadrunner.com wrote: 
> Hi (again) -
> 
>   This one has me a bit puzzled. I am trying to write to redis using the example from the syslog-ng documentation:
> 
> destination d_local_redis {
>  redis(command("HINCRBY" "${HOST}/programs" "${PROGRAM}" "1"));
> };
> 
> but I am getting "-ERR value is not an integer or out of range"
> 
> I have tried this on a couple systems. This particular one is:
> 
> [n0142566 at VDDP13E-F1A47ED src]$ /usr/local/sbin/syslog-ng --version
> syslog-ng 3.5.4.1
> Installer-Version: 3.5.4.1
> Revision: 
> Compile-Date: Jul 22 2014 12:30:06
> Available-Modules: afsocket-notls,afprog,csvparser,system-source,dbparser,redis,syslogformat,afuser,afstomp,afmongodb,linux-kmsg-format,json-plugin,basicfuncs,afamqp,affile,cryptofuncs,afsocket,confgen
> Enable-Debug: off
> Enable-GProf: off
> Enable-Memtrace: off
> Enable-IPv6: on
> Enable-Spoof-Source: off
> Enable-TCP-Wrapper: off
> Enable-Linux-Caps: off
> Enable-Pcre: off
> [n0142566 at VDDP13E-F1A47ED src]$ 
> 
> And I have captured the packets to see what is being sent and see this following the TCP stream with Wireshark
> (pcap attached)
> 
> *1
> $4
> ping
> +PONG
> *4
> $7
> HINCRBY
> $24
> VDDP13E-F1A47ED/programs
> $16
> ArcSightLogs_PDC
> $2
>  *
> -ERR value is not an integer or out of range
> 
> Note: when I use ("INCR" "testkey") it works - seems like the integer increment is not being sent correctly?
> 
> Is this something I am getting wrong or is it a bug ?
> 
> Thanks (again)
> 
> Jim
> 
> 
> 
>