[syslog-ng] Syslog-ng using an old Template

[Jim Hendrick]

It should be simple to figure out.

I would try making sure the syslog-ng process is actually using the
correct config file.

Find and kill all syslog-ng processes
examine the startup script to make sure it specifies the right one
restart

If this does not immediately show the answer, try moving the "old" one
by either making it unreadable, putting it in a new directory, giving it
a new name, etc.

Then the startup should fail and give some useful information.

last resort try tracing the start e.g. "strace syslog-ng" to see what
files are opened during startup.

This is basic troubleshooting. Eliminate things, verify what you think
you know and then make one change at a time until you affect the
situation, then at least you know what will change the state of things
and you can proceed in that direction.

Jim

On 07/22/2014 03:46 AM, Anwar El fatayri wrote:
> * Any ideas ? 
> *
>
> *El Fatayri Anwar
> *
>
>
>
>
> ------------------------------------------------------------------------
> From: anwar.fatayri at hotmail.co.uk
> To: syslog-ng at lists.balabit.hu
> Date: Mon, 21 Jul 2014 10:47:01 +0200
> Subject: [syslog-ng] Syslog-ng using an old Template
>
> *Hey,*
> *
> *
> *I was using this template for my tests : *
> *
> *
> *
> template t_lyraJBossFormat {
>
>                 template("${DATE} ${FULLHOST} jboss_vad - ------------
> - SD : ${SDATA} - *------------ - MSG :**
>  ${MSGONLY}\n");
> *
> **
>                 template_escape(no);
> };
>
> This template is a Format that I use for JBoss Logs. The syslog packet
> (IETF) is created and then sent to syslog-ng via a named pipe. 
>
> After Debugging all the problems, the following template was created
> to be used for all Jboss Logs :
>
> template t_lyraJBossFormat {
>
>                 template("${DATE} ${FULLHOST} jboss_vad - ${SDATA} -
> ${MSGONLY}\n");
>                 template_escape(no);
> };
>
>
> The problem is that syslog-ng is still using the old template. (I
> restarted the syslog-ng service of course) 
>
> Any ideas ?
>
> Thanks in advance.
> *
>
> *El Fatayri Anwar
> *
>
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng FAQ:
> http://www.balabit.com/wiki/syslog-ng-faq
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20140722/b588ace2/attachment.htm