[syslog-ng] syslog-ng 3.13.1

Robin Blanchard rblanchard at nephilaadvisors.com
Tue Dec 5 16:21:06 UTC 2017


This suggestion worked (in that syslog-ng threw no error).

Is this a regression or a design change?

From: syslog-ng [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Budai, László
Sent: Tuesday, December 5, 2017 10:19 AM
To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu>
Subject: Re: [syslog-ng] syslog-ng 3.13.1

Hi,
try to set as a string value:
bad-hostname ("^[^A-Za-z0-9]");

regards,
Laszlo Budai

On Tue, Dec 5, 2017 at 4:43 PM, Robin Blanchard <rblanchard at nephilaadvisors.com<mailto:rblanchard at nephilaadvisors.com>> wrote:

This config option fails on 3.13.1 (which has worked through 3.12.1)



Error parsing config, syntax error, unexpected $undefined, expecting ')'



bad-hostname (^[^A-Za-z0-9]);





$ yum info syslog-ng

Loaded plugins: fastestmirror, rhnplugin

This system is receiving updates from RHN Classic or Red Hat Satellite.

Loading mirror speeds from cached hostfile

Installed Packages

Name        : syslog-ng

Arch        : x86_64

Version     : 3.13.1

Release     : 1.el7.centos

Size        : 2.5 M

Repo        : installed

From repo   : czanik-syslog-ng-3.13

Summary     : Next-generation syslog server

URL         : http://www.balabit.com/network-security/syslog-ng

License     : GPLv2+

Description : syslog-ng is an enhanced log daemon, supporting a wide range of input and

            : output methods: syslog, unstructured text, message queues, databases (SQL

            : and NoSQL alike) and more.

            :

            : Key features:

            :

            :  * receive and send RFC3164 and RFC5424 style syslog messages

            :  * work with any kind of unstructured data

            :  * receive and send JSON formatted messages

            :  * classify and structure logs with builtin parsers (csv-parser(),

            :    db-parser(), ...)

            :  * normalize, crunch and process logs as they flow through the system

            :  * hand on messages for further processing using message queues (like

            :    AMQP), files or databases (like PostgreSQL or MongoDB).









From: syslog-ng [mailto:syslog-ng-bounces at lists.balabit.hu<mailto:syslog-ng-bounces at lists.balabit.hu>] On Behalf Of Budai, László
Sent: Monday, December 4, 2017 8:46 AM
To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu<mailto:syslog-ng at lists.balabit.hu>>
Subject: [syslog-ng] syslog-ng 3.13.1



3.13.1
Features

  *   Add app-parser() framework (automatic parsing of log messages) (#1689<https://github.com/balabit/syslog-ng/pull/1689>)
  *   Support microseconds in Riemann destination (#1710<https://github.com/balabit/syslog-ng/pull/1710>)
  *   Add osquery destination as an SCL plugin (#1728<https://github.com/balabit/syslog-ng/pull/1728>)
  *   Add network load balancer destination (#1706<https://github.com/balabit/syslog-ng/pull/1706>)
  *   Add possibility to only signal re-open of file handles (SIGUSR1) (#1530<https://github.com/balabit/syslog-ng/pull/1530>)
  *   It is possible from now to limit the number of registered dynamic counters (#1743<https://github.com/balabit/syslog-ng/pull/1743>)
  *   Add $(binary) template function (#1679<https://github.com/balabit/syslog-ng/pull/1679>)
  *   Add experimental transport for transferring messages in whole between syslog-ng instances (EWMM) (#1689<https://github.com/balabit/syslog-ng/pull/1689>)
  *   Docker based build and debian package generation (#1783<https://github.com/balabit/syslog-ng/pull/1783>)
  *   Add auto-parse(yes/no) to app-paser(), system() and default-network-drivers() (#1788<https://github.com/balabit/syslog-ng/pull/1788>)
  *   Add Graylog2 destination and $(format-gelf) template function (#1680<https://github.com/balabit/syslog-ng/pull/1680>)

Bugfixes

  *   Exit when a read fails on an included config file instead of
starting up with an empty configuration. (#1721<https://github.com/balabit/syslog-ng/pull/1721>)
  *   Fix double free (#1720<https://github.com/balabit/syslog-ng/issues/1720>)
  *   Add missing discarded counter to groupingby (#1748<https://github.com/balabit/syslog-ng/pull/1748>)
  *   Fix a reference leak in Python destination (#1716<https://github.com/balabit/syslog-ng/pull/1716>)
  *   Fix timezone issue in snmptrapd parser (#1746<https://github.com/balabit/syslog-ng/pull/1746>)
  *   Fix potential crash in stdin driver (#1741<https://github.com/balabit/syslog-ng/pull/1741>)
  *   Fix a crash when initializing new config fails for socket with keep_alive off (#1723<https://github.com/balabit/syslog-ng/pull/1723>)
  *   Fix filter evaluation in case of contexts with multiple elements (#1718<https://github.com/balabit/syslog-ng/pull/1718>)
  *   Various grouping-by fixes (#1718<https://github.com/balabit/syslog-ng/pull/1718>)
  *   Fix potential use after free around dns-cache during shutdown (#1666<https://github.com/balabit/syslog-ng/pull/1666>)
  *   Fix access to indirect values within Java destination (#1732<https://github.com/balabit/syslog-ng/pull/1732>)
  *   Fix a crash in affile (#1725<https://github.com/balabit/syslog-ng/pull/1725>)
  *   Fix a memory leak (#1724<https://github.com/balabit/syslog-ng/pull/1724>)
  *   Fix a crash when getent is used empty group (#1691<https://github.com/balabit/syslog-ng/pull/1691>)
  *   Fix jvm-options() (#1704<https://github.com/balabit/syslog-ng/pull/1704>)
  *   Fix a crash in Python language binding (#1694<https://github.com/balabit/syslog-ng/pull/1694>)
  *   Fix a crash in afmongodb (#1765<https://github.com/balabit/syslog-ng/pull/1765>)
  *   Fix a memory leak in afmongodb (#1766<https://github.com/balabit/syslog-ng/pull/1766>)
  *   Fix name-to-GID calculation in the $(getent) template function (#1764<https://github.com/balabit/syslog-ng/pull/1764>)
  *   Fix a crash when redis is configured without the command() option (#1767<https://github.com/balabit/syslog-ng/pull/1767>)
  *   Fix a race condition in kv-parser() (#1789<https://github.com/balabit/syslog-ng/pull/1789>)

Other changes

  *   Cleanup diskq related warning messages (#1752<https://github.com/balabit/syslog-ng/pull/1752>)
  *   Provide tls block for tls options in amqp(), http(), riemann() destination drivers (#1715<https://github.com/balabit/syslog-ng/pull/1715>)
  *   It it possible from now to register blocks and generators as plugins (#1657<https://github.com/balabit/syslog-ng/pull/1657>)
  *   Drop compatiblity with configurations below 3.0 (#1709<https://github.com/balabit/syslog-ng/pull/1709>)
  *   Do not change permissions of a file by default (#1782<https://github.com/balabit/syslog-ng/pull/1782>)
  *   Allow source files to specify permissions locally (#1782<https://github.com/balabit/syslog-ng/pull/1782>)
  *   Minor performance improvement (#1729<https://github.com/balabit/syslog-ng/pull/1729>)
  *   The current config version can be queried with "--version" (#1740<https://github.com/balabit/syslog-ng/pull/1740>)
  *   Increase the performance of kv-parser() (#1789<https://github.com/balabit/syslog-ng/pull/1789>)

Notes to the developers

  *   Change configure default option for jsonc and mongoc from auto to internal (#1735<https://github.com/balabit/syslog-ng/pull/1735>)
  *   Disable ASLR when running unit tests (#1753<https://github.com/balabit/syslog-ng/pull/1753>)

Credits

syslog-ng is developed as a community project, and as such it relies
on volunteers, to do the work necessarily to produce syslog-ng.

Reporting bugs, testing changes, writing code or simply providing
feedback are all important contributions, so please if you are a user
of syslog-ng, contribute.

We would like to thank the following people for their contribution:
Andras Mitzki, Antal Nemes, Attila Szalay, Balazs Scheidler, Gabor Nagy,
Jakub Jankowski, Janos Szigetvari, Laszlo Budai, Laszlo Varady, Laszlo Szemere,
Marton Illes, Mate Farkas, Peter Kokai, Pontus Andersson, Sam Stephenson,
Sebastian Roland, Viktor Juhasz, Zoltan Pallagi.



______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20171205/1483c139/attachment-0001.html>


More information about the syslog-ng mailing list