[syslog-ng] date-parser not found

Sandbox sandboxheh at gmail.com
Tue Jun 13 13:18:13 UTC 2017


Hi,

Ohh, my bad, i forgot to add the repository after I imported the key :)

Thanks, Robert

2017-06-13 12:24 GMT+02:00 Czanik, Péter <peter.czanik at balabit.com>:

> It was added in version 3.8, so you should install a more recent version
> of syslog-ng. You can find links to download locations and documentation at
> https://syslog-ng.org/3rd-party-binaries/
>
> Bye,
>
> Peter Czanik (CzP) <peter.czanik at balabit.com>
> Balabit / syslog-ng upstream
> https://www.balabit.com/blog/author/peterczanik/
> https://twitter.com/PCzanik
>
> On Tue, Jun 13, 2017 at 12:15 PM, Sandbox <sandboxheh at gmail.com> wrote:
>
>> Hi,
>>
>> I would like to use the date-parser.
>>
>> When i using the below parse it says "date-parser not found":
>>
>> parser haproxy_date {
>>     date-parser(
>>          format("%d/%m/%Y:%H:%M:%S %z")
>>          template("$(substr ${MSG} 0 27)") );.
>> };
>>
>> Plugin module not found in 'module-path'; module-path='/usr/lib/syslog-ng/3.5.6',
>> module='date-parser'
>> Error parsing parser expression, parser plugin date-parser not found in
>> /etc/syslog-ng/conf.d/20-haproxy.conf at line 26, column 5:
>>                                                           included from
>> /etc/syslog-ng/syslog-ng.conf line 165, column 1
>>
>>     date-parser(
>>     ^^^^^^^^^^^
>>
>> It's weird, because when i try to use the date-parser module in the log
>> section:
>>
>> log { source(s_haproxy); filter(f_haproxy_info);
>> date-parser(format("%d/%m/%Y:%H:%M:%S %z") template("$(substr ${MSG} 0
>> 27)") ); destination(d_haproxy_info); };
>>
>> it says:
>>
>> Error parsing log, syntax error, unexpected LL_IDENTIFIER, expecting '}'
>> in /etc/syslog-ng/conf.d/20-haproxy.conf at line 37, column 5:
>>                                                               included
>> from /etc/syslog-ng/syslog-ng.conf line 165, column 1
>>
>>     date-parser(format("%d/%m/%Y:%H:%M:%S %z") template("$(substr ${MSG}
>> 0 27)") );
>>     ^^^^^^^^^^^
>>
>> In OSE version the date-parser module is not available, or i'm missing
>> something?
>>
>>
>> Thanks, Robert
>>
>> ____________________________________________________________
>> __________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation: http://www.balabit.com/support/documentation/?product=
>> syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>>
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20170613/0044ceb8/attachment.html>


More information about the syslog-ng mailing list