[syslog-ng] Syslog-ng using an old Template

[Evan Rempel]

I also find it useful to look at the preprocessed config that syslog-ng thinks it is using by

syslog-ng -s --preprocess-into=/dev/stdout -f /path/to/syslog-ng.conf




On 07/22/2014 05:30 AM, Jim Hendrick wrote:
> It should be simple to figure out.
>
> I would try making sure the syslog-ng process is actually using the correct config file.
>
> Find and kill all syslog-ng processes
> examine the startup script to make sure it specifies the right one
> restart
>
> If this does not immediately show the answer, try moving the "old" one by either making it unreadable, putting it in a new directory, giving it a new name, etc.
>
> Then the startup should fail and give some useful information.
>
> last resort try tracing the start e.g. "strace syslog-ng" to see what files are opened during startup.
>
> This is basic troubleshooting. Eliminate things, verify what you think you know and then make one change at a time until you affect the situation, then at least you know what will change the state of things and you can proceed in that direction.
>
> Jim
>
> On 07/22/2014 03:46 AM, Anwar El fatayri wrote:
>> * Any ideas ?
>> *
>>
>> *El Fatayri Anwar
>> *
>>
>>
>>
>>
>> --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>> From: anwar.fatayri at hotmail.co.uk
>> To: syslog-ng at lists.balabit.hu
>> Date: Mon, 21 Jul 2014 10:47:01 +0200
>> Subject: [syslog-ng] Syslog-ng using an old Template
>>
>> *Hey,*
>> *
>> *
>> *I was using this template for my tests : *
>> *
>> *
>> *
>> template t_lyraJBossFormat {
>>
>>                 template("${DATE} ${FULLHOST} jboss_vad - ------------ - SD : ${SDATA} - *------------ - MSG :**
>>  ${MSGONLY}\n");
>> *
>> **
>>                 template_escape(no);
>> };
>>
>> This template is a Format that I use for JBoss Logs. The syslog packet (IETF) is created and then sent to syslog-ng via a named pipe.
>>
>> After Debugging all the problems, the following template was created to be used for all Jboss Logs :
>>
>> template t_lyraJBossFormat {
>>
>>                 template("${DATE} ${FULLHOST} jboss_vad - ${SDATA} - ${MSGONLY}\n");
>>                 template_escape(no);
>> };
>>
>>
>> The problem is that syslog-ng is still using the old template. (I restarted the syslog-ng service of course)
>>
>> Any ideas ?
>>
>> Thanks in advance.
>> *
>>
>> *El Fatayri Anwar
>> *
>>
>>
>>
>> ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>> ______________________________________________________________________________
>> Member info:https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation:http://www.balabit.com/support/documentation/?product=syslog-ng
>> FAQ:http://www.balabit.com/wiki/syslog-ng-faq
>>
>
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>


-- 
Evan Rempel                                      erempel at uvic.ca
Senior Systems Administrator                        250.721.7691
Data Centre Services, University Systems, University of Victoria