[syslog-ng] date-parser not found

[Czanik, Péter]

It was added in version 3.8, so you should install a more recent version of
syslog-ng. You can find links to download locations and documentation at
https://syslog-ng.org/3rd-party-binaries/

Bye,

Peter Czanik (CzP) <peter.czanik at balabit.com>
Balabit / syslog-ng upstream
https://www.balabit.com/blog/author/peterczanik/
https://twitter.com/PCzanik

On Tue, Jun 13, 2017 at 12:15 PM, Sandbox <sandboxheh at gmail.com> wrote:

> Hi,
>
> I would like to use the date-parser.
>
> When i using the below parse it says "date-parser not found":
>
> parser haproxy_date {
>     date-parser(
>          format("%d/%m/%Y:%H:%M:%S %z")
>          template("$(substr ${MSG} 0 27)") );.
> };
>
> Plugin module not found in 'module-path'; module-path='/usr/lib/syslog-ng/3.5.6',
> module='date-parser'
> Error parsing parser expression, parser plugin date-parser not found in
> /etc/syslog-ng/conf.d/20-haproxy.conf at line 26, column 5:
>                                                           included from
> /etc/syslog-ng/syslog-ng.conf line 165, column 1
>
>     date-parser(
>     ^^^^^^^^^^^
>
> It's weird, because when i try to use the date-parser module in the log
> section:
>
> log { source(s_haproxy); filter(f_haproxy_info);
> date-parser(format("%d/%m/%Y:%H:%M:%S %z") template("$(substr ${MSG} 0
> 27)") ); destination(d_haproxy_info); };
>
> it says:
>
> Error parsing log, syntax error, unexpected LL_IDENTIFIER, expecting '}'
> in /etc/syslog-ng/conf.d/20-haproxy.conf at line 37, column 5:
>                                                               included
> from /etc/syslog-ng/syslog-ng.conf line 165, column 1
>
>     date-parser(format("%d/%m/%Y:%H:%M:%S %z") template("$(substr ${MSG}
> 0 27)") );
>     ^^^^^^^^^^^
>
> In OSE version the date-parser module is not available, or i'm missing
> something?
>
>
> Thanks, Robert
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20170613/ae087bc8/attachment.html>