[syslog-ng] "Error checking uniqueness"

[David Hauck]

Hi,
 
On Thursday, February 23, 2017 10:56 AM, David Hauck wrote:
> Hi Noémi,
> 
> Excellent information, thx! I'll give this a try...

So this corrected the failures and I now have syslog-ng running again with my pre-existing configuration.

I'd like to come back to the "format-json" error (corrected by removing the /usr/share/syslog-ng/include/scl/cim folder). I went back and looked at my build configuration and see that I didn't have "--enable-json" present. Thinking this might have been at the root of this problem I rebuilt and redeployed. However, I still see this error. Is there a better way to fix this?

Regards,
-David
 
> Thanks again,
> -David
> 
> On Thursday, February 23, 2017 8:50 AM, syslog-ng wrote:
>> Syslog-ng stores persistent options and data in syslog-ng.persist file.
>> It contains data about drivers specified in the configuration. The
>> drivers are identified by their "settings". In your case you have
>> three file drivers which contain the same log file: "/var/log/abc/audit_log".
>> Thus, the id of that driver is not unique. To provide a unique
>> identifier for these drivers you must specify a different string in
>> persist-name.
>> 
>> For example, you could add persist-name("abcaudit") to driver
>> d_abcaudit, persist- name("abcaudit_Prio") to driver d_abcaudit_Prio
>> and persist-name("abcaudit_IPtab") to d_abcaudit_IPtab. The key is that
>> the string in persist-name is unique.
>> 
>> Previously, handling multiple drivers on the same thing was broken in
>> the usage of the persist file, if I recall correctly. This
>> persist-name option was introduced to fix the problem. So, in previous versions it was buggy.
>> 
>> BR,
>> kvch
>> 
>> On 23 February 2017 at 16:43, David Hauck <davidh at netacquire.com
>> <mailto:davidh at netacquire.com> > wrote:
>> 
>> 	Hi András,
>> 
>> 	On Thu, 23 Feb 2017 at 00:22:00, syslog-ng wrote: 	> Hi David, 	> 	>
>> The issue with persist_name() option was mentioned (and solved) 	>
>> previously in: https://github.com/balabit/syslog-
>> <https://github.com/balabit/syslog-> 	> ng/issues/1275
>> 
>> 	Thx, I'd seen that entry prior to my email, however, it wasn't clear
>> to me what exactly this doing. And I wasn't able to find anything in
>> the documentation regarding the persist-name() option. Moreover, I
>> wasn't sure if this would work with my 'destination' specification (as
>> seen below).
>> 
>> 	What exactly does "persit-name()" do? How exactly do I specifcy this
>> for my destination specifications below? And what has changed between
>> these two versions to now require this option?
>> 
>> 	Thanks,
>> 	-David
>> 
>> 
>> 	> Br, 	> Andras 	> 	> 	> On Thu, Feb 23, 2017 at 1:28 AM, David Hauck
>> <davidh at netacquire.com <mailto:davidh at netacquire.com> > 	> wrote: 	> 	>
>> 	>       Hi, 	> 	>       I'm in the processing or updating a
>> distribution's v3.6.3 syslog-ng 	> configuration to v3.9.1 and am
>> running into some issues getting 	> syslog-ng started. The first one
>> was: 	> 	>       Starting syslog-ng: Error parsing config, Error
>> compiling template 	> (Unknown template function "format-json") in 	>
>> /usr/share/syslog-ng/include/scl/cim/template.conf at line 23, column 	>
>> 32 	> 	>       I found a reference online to fixing this by removing 	>
>> /usr/share/syslog-ng/include/scl/cim and this indeed got me past this 	>
>> error (hopefully this is an otherwise benign modification). 	> 	>
>> I'm now stuck at the following error: 	> 	>       Starting syslog-ng:
>> [2017-02-22T08:07:50.101422] Error checking the 	> uniqueness of the
>> persist names, please override it with persist-name 	> option. Shutting
>> down.; 	> persist_name='affile_dd_writers(/var/log/abc/audit_log)', 	>
>> location='/etc/syslog-ng.conf:128:33' 	> 	>       Here's snippet from my
>> configuration file that this error message 	> references: 	> 	>
>> ... 	>       destination d_abcaudit         {
>> file("/var/log/abc/audit_log" 	> template(t_NAFormat));        }; 	>
>>   destination d_abcaudit_Prio    { file("/var/log/abc/audit_log" 	>
>> template(t_NAFormat_Prio));   }; 	>       --> destination
>> d_abcaudit_IPtab   { 	> file("/var/log/abc/audit_log"
>> template(t_abcFormat_IPtab)); }; 	>       destination d_abcmessage_Prio
>> { file("/dev/null"); }; 	>       ... 	> 	>       I wasn't able to find
>> any documentation or guidance on the 	> "persist-name" option. Any ideas
>> on how I should go about fixing this 	> error? 	> 	>       Thanks, 	>
>>    -David