[syslog-ng] date-parser not found

[Fabien Wernli]

Hi,

On Tue, Jun 13, 2017 at 12:15:00PM +0200, Sandbox wrote:
> Plugin module not found in 'module-path';
> module-path='/usr/lib/syslog-ng/3.5.6', module='date-parser'
> Error parsing parser expression, parser plugin date-parser not found in
> /etc/syslog-ng/conf.d/20-haproxy.conf at line 26, column 5:

Your syslog-ng version is too old.
It has been added in syslog-ng-3.8.1.
If you can't upgrade, you might wanna check out the incubator which might be
available for your version of syslog-ng.

> It's weird, because when i try to use the date-parser module in the log
> section:
> 
> log { source(s_haproxy); filter(f_haproxy_info);
> date-parser(format("%d/%m/%Y:%H:%M:%S %z") template("$(substr ${MSG} 0
> 27)") ); destination(d_haproxy_info); };
> 
> it says:
> 
> Error parsing log, syntax error, unexpected LL_IDENTIFIER, expecting '}' in
> /etc/syslog-ng/conf.d/20-haproxy.conf at line 37, column 5:

that's perfectly normal: if you want to use inline blocks the correct syntax
would be:

log {
  ...
  parser {
    date-parser(
      ...
    );
  };
  ...
};