[syslog-ng] odd configuration file

[Rick Silacci]

Hi, Can you tell what I'm doing wrong here?  I entered destination mongodb { mongodb(); };  
log { source(src); destination(mongodb); }; in syslogng.conf as in the directions and this is what happens:

user at syslog:~/syslogng-web$ sudo service syslog-ng restart
 * Stopping system logging syslog-ng                                                                           [ OK ] 
 * Starting system logging syslog-ng                                                                                  Error parsing destination, destination plugin mongodb not found in /etc/syslog-ng/syslog-ng.conf at line 30, column 23:

destination mongodb { mongodb() ; };
                 ^^^^^^^

syslog-ng documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
mailing list: https://lists.balabit.hu/mailman/listinfo/syslog-ng



________________________________________
From: syslog-ng-bounces at lists.balabit.hu [syslog-ng-bounces at lists.balabit.hu] on behalf of Scheidler, Balázs [balazs.scheidler at balabit.com]
Sent: Wednesday, May 27, 2015 12:55 PM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] odd configuration file

Yup, its a pretty common format though not necessarily the most intuitive if you haven't seen that.

On May 27, 2015 9:48 PM, "craig bowser" <reswob10 at gmail.com<mailto:reswob10 at gmail.com>> wrote:
Never mind.

For those that don't know, a coworker told me that error means the error is at line 132, column 7.

Thanks.


Craig L Bowser
____________________________

This email is measured by size.  Bits and bytes may have settled during transport.

On Wed, May 27, 2015 at 3:30 PM, craig bowser <reswob10 at gmail.com<mailto:reswob10 at gmail.com>> wrote:

Hi, I'm just learning about configuring syslog-ng.  I'm using the latest version (info at end of email) and I've run into an error I can't figure out.  I made a syntax error in my syslog-ng.conf that caused syslog-ng to fail to start.  I corrected the error, but now when I try and start syslog-ng, it still fails.

trying to start it with 'service syslog-ng start' or 'service syslog-ng restart' gets me:  Job for syslog-ng.service failed. See "systemctl status syslog-ng.service" and "journalctl -xe" for details.

But the error is buried in the systemd logs.  Using '/usr/sbin/syslog-ng -F'  gets me the following error:

Error resolving reference; content='source', name='s_name', location='/etc/syslog-ng/syslog-ng.conf:132:7'


What is that file?  Can I safely delete it?  Why can't I make it use the new .conf file?  When I try '/usr/sbin/syslog-ng -f /etc/syslog-ng/syslog-ng.conf  -F'   I get the same error.


syslog-ng 3.5.6
Installer-Version: 3.5.6
Revision: 3.5.6-2 [@416d315] (Ubuntu/15.04)
Compile-Date: Oct 25 2014 14:14:32
Available-Modules: afuser,afsocket-notls,linux-kmsg-format,afprog,tfgeoip,csvparser,confgen,afamqp,json-plugin,redis,basicfuncs,afsmtp,affile,afsql,afmongodb,cryptofuncs,afsocket-tls,afsocket,syslogformat,afstomp,system-source,dbparser
Enable-Debug: off
Enable-GProf: off
Enable-Memtrace: off
Enable-IPv6: on
Enable-Spoof-Source: on
Enable-TCP-Wrapper: on
Enable-Linux-Caps: on
Enable-Pcre: on




Craig L Bowser
____________________________

This email is measured by size.  Bits and bytes may have settled during transport.


______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq