[syslog-ng] RES: RES: Problem activating: Centos7 + Syslog-ng OSE + Elasticsearch + kibana

Fri Apr 6 14:13:08 UTC 2018

Hi!

Removed and reinstalled again with the correct repo.

[root at syslog conf.d]# /usr/sbin/syslog-ng -V
syslog-ng 3 (3.14.1)
Config version: 3.14
Installer-Version: 3.14.1
Revision:
Compile-Date: Feb 28 2018 07:34:20
Module-Directory: //usr/lib64/syslog-ng
Module-Path: //usr/lib64/syslog-ng
Available-Modules: add-contextual-data,afamqp,affile,afprog,afsocket,afstomp,afuser,appmodel,basicfuncs,cef,confgen,cryptofuncs,csvparser,date,dbparser,disk-buffer,graphite,json-plugin,kvformat,linux-kmsg-format,map-value-pairs,pseudofile,sdjournal,snmptrapd-parser,stardate,syslogformat,system-source,tags-parser,tfgetent,xml
Enable-Debug: off
Enable-GProf: off
Enable-Memtrace: off
Enable-IPv6: on
Enable-Spoof-Source: on
Enable-TCP-Wrapper: on
Enable-Linux-Caps: on
Enable-Systemd: on

Now the java module appears at scl.conf

[root at syslog syslog-ng]# grep '@define java-module-dir' scl.conf
@define java-module-dir "`module-install-dir`/java-modules"

[root at syslog syslog-ng]# java -version
openjdk version "1.8.0_161"
OpenJDK Runtime Environment (build 1.8.0_161-b14)
OpenJDK 64-Bit Server VM (build 25.161-b14, mixed mode)

But the service still not starting, below the new output.

[root at syslog syslog-ng]# /usr/sbin/syslog-ng -Fedv
[2018-04-06T11:12:32.179592] Systemd is detected as the running init system;
[2018-04-06T11:12:32.182143] Starting to read include file; filename='/etc/syslog-ng/scl.conf', depth='1'
[2018-04-06T11:12:32.184121] Adding include file; filename='/usr/share/syslog-ng/include/scl/apache/apache.conf', depth='2'
[2018-04-06T11:12:32.184144] Adding include file; filename='/usr/share/syslog-ng/include/scl/cim/adapter.conf', depth='2'
[2018-04-06T11:12:32.184165] Adding include file; filename='/usr/share/syslog-ng/include/scl/cim/template.conf', depth='2'
[2018-04-06T11:12:32.184223] Adding include file; filename='/usr/share/syslog-ng/include/scl/cisco/plugin.conf', depth='2'
[2018-04-06T11:12:32.184245] Adding include file; filename='/usr/share/syslog-ng/include/scl/default-network-drivers/plugin.conf', depth='2'
[2018-04-06T11:12:32.184264] Adding include file; filename='/usr/share/syslog-ng/include/scl/elasticsearch/plugin.conf', depth='2'
[2018-04-06T11:12:32.184284] Adding include file; filename='/usr/share/syslog-ng/include/scl/ewmm/ewmm.conf', depth='2'
[2018-04-06T11:12:32.184303] Adding include file; filename='/usr/share/syslog-ng/include/scl/graphite/plugin.conf', depth='2'
[2018-04-06T11:12:32.184323] Adding include file; filename='/usr/share/syslog-ng/include/scl/graylog2/plugin.conf', depth='2'
[2018-04-06T11:12:32.184342] Adding include file; filename='/usr/share/syslog-ng/include/scl/hdfs/plugin.conf', depth='2'
[2018-04-06T11:12:32.184361] Adding include file; filename='/usr/share/syslog-ng/include/scl/iptables/iptables.conf', depth='2'
[2018-04-06T11:12:32.184380] Adding include file; filename='/usr/share/syslog-ng/include/scl/kafka/plugin.conf', depth='2'
[2018-04-06T11:12:32.184400] Adding include file; filename='/usr/share/syslog-ng/include/scl/loadbalancer/plugin.conf', depth='2'
[2018-04-06T11:12:32.184419] Adding include file; filename='/usr/share/syslog-ng/include/scl/loggly/loggly.conf', depth='2'
[2018-04-06T11:12:32.184439] Adding include file; filename='/usr/share/syslog-ng/include/scl/logmatic/logmatic.conf', depth='2'
[2018-04-06T11:12:32.184459] Adding include file; filename='/usr/share/syslog-ng/include/scl/mbox/mbox.conf', depth='2'
[2018-04-06T11:12:32.184485] Adding include file; filename='/usr/share/syslog-ng/include/scl/nodejs/plugin.conf', depth='2'
[2018-04-06T11:12:32.184525] Adding include file; filename='/usr/share/syslog-ng/include/scl/osquery/plugin.conf', depth='2'
[2018-04-06T11:12:32.184546] Adding include file; filename='/usr/share/syslog-ng/include/scl/pacct/plugin.conf', depth='2'
[2018-04-06T11:12:32.184566] Adding include file; filename='/usr/share/syslog-ng/include/scl/rewrite/cc-mask.conf', depth='2'
[2018-04-06T11:12:32.184586] Adding include file; filename='/usr/share/syslog-ng/include/scl/snmptrap/snmptrapd-source.conf', depth='2'
[2018-04-06T11:12:32.184606] Adding include file; filename='/usr/share/syslog-ng/include/scl/solaris/plugin.conf', depth='2'
[2018-04-06T11:12:32.184626] Adding include file; filename='/usr/share/syslog-ng/include/scl/sudo/sudo.conf', depth='2'
[2018-04-06T11:12:32.184646] Adding include file; filename='/usr/share/syslog-ng/include/scl/syslogconf/plugin.conf', depth='2'
[2018-04-06T11:12:32.184666] Adding include file; filename='/usr/share/syslog-ng/include/scl/system/plugin.conf', depth='2'
[2018-04-06T11:12:32.184685] Adding include file; filename='/usr/share/syslog-ng/include/scl/windowseventlog/plugin.conf', depth='2'
[2018-04-06T11:12:32.184730] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/apache/apache.conf', depth='2'
[2018-04-06T11:12:32.213953] Registering candidate plugin; module='add-contextual-data', context='parser', name='add_contextual_data'
[2018-04-06T11:12:32.214376] Registering candidate plugin; module='afamqp', context='destination', name='amqp'
[2018-04-06T11:12:32.214467] Registering candidate plugin; module='affile', context='source', name='file'
[2018-04-06T11:12:32.214500] Registering candidate plugin; module='affile', context='source', name='pipe'
[2018-04-06T11:12:32.214521] Registering candidate plugin; module='affile', context='source', name='wildcard_file'
[2018-04-06T11:12:32.214542] Registering candidate plugin; module='affile', context='source', name='stdin'
[2018-04-06T11:12:32.214563] Registering candidate plugin; module='affile', context='destination', name='file'
[2018-04-06T11:12:32.214584] Registering candidate plugin; module='affile', context='destination', name='pipe'
[2018-04-06T11:12:32.214604] Registering candidate plugin; module='afprog', context='source', name='program'
[2018-04-06T11:12:32.214625] Registering candidate plugin; module='afprog', context='destination', name='program'
[2018-04-06T11:12:32.214646] Registering candidate plugin; module='afsocket', context='source', name='unix-stream'
[2018-04-06T11:12:32.214667] Registering candidate plugin; module='afsocket', context='destination', name='unix-stream'
[2018-04-06T11:12:32.214688] Registering candidate plugin; module='afsocket', context='source', name='unix-dgram'
[2018-04-06T11:12:32.214761] Registering candidate plugin; module='afsocket', context='destination', name='unix-dgram'
[2018-04-06T11:12:32.214808] Registering candidate plugin; module='afsocket', context='source', name='tcp'
[2018-04-06T11:12:32.214835] Registering candidate plugin; module='afsocket', context='destination', name='tcp'
[2018-04-06T11:12:32.214858] Registering candidate plugin; module='afsocket', context='source', name='tcp6'
[2018-04-06T11:12:32.214879] Registering candidate plugin; module='afsocket', context='destination', name='tcp6'
[2018-04-06T11:12:32.214908] Registering candidate plugin; module='afsocket', context='source', name='udp'
[2018-04-06T11:12:32.214929] Registering candidate plugin; module='afsocket', context='destination', name='udp'
[2018-04-06T11:12:32.214950] Registering candidate plugin; module='afsocket', context='source', name='udp6'
[2018-04-06T11:12:32.214971] Registering candidate plugin; module='afsocket', context='destination', name='udp6'
[2018-04-06T11:12:32.214992] Registering candidate plugin; module='afsocket', context='source', name='syslog'
[2018-04-06T11:12:32.215013] Registering candidate plugin; module='afsocket', context='destination', name='syslog'
[2018-04-06T11:12:32.215033] Registering candidate plugin; module='afsocket', context='source', name='network'
[2018-04-06T11:12:32.215054] Registering candidate plugin; module='afsocket', context='destination', name='network'
[2018-04-06T11:12:32.215076] Registering candidate plugin; module='afsocket', context='source', name='systemd-syslog'
[2018-04-06T11:12:32.215542] Registering candidate plugin; module='afstomp', context='destination', name='stomp'
[2018-04-06T11:12:32.215566] Registering candidate plugin; module='afuser', context='destination', name='usertty'
[2018-04-06T11:12:32.215587] Registering candidate plugin; module='appmodel', context='root', name='application'
[2018-04-06T11:12:32.215608] Registering candidate plugin; module='appmodel', context='parser', name='app-parser'
[2018-04-06T11:12:32.215629] Registering candidate plugin; module='basicfuncs', context='template-func', name='grep'
[2018-04-06T11:12:32.215650] Registering candidate plugin; module='basicfuncs', context='template-func', name='if'
[2018-04-06T11:12:32.215671] Registering candidate plugin; module='basicfuncs', context='template-func', name='or'
[2018-04-06T11:12:32.215692] Registering candidate plugin; module='basicfuncs', context='template-func', name='context-lookup'
[2018-04-06T11:12:32.215719] Registering candidate plugin; module='basicfuncs', context='template-func', name='context-length'
[2018-04-06T11:12:32.215740] Registering candidate plugin; module='basicfuncs', context='template-func', name='context-values'
[2018-04-06T11:12:32.215761] Registering candidate plugin; module='basicfuncs', context='template-func', name='echo'
[2018-04-06T11:12:32.215782] Registering candidate plugin; module='basicfuncs', context='template-func', name='length'
[2018-04-06T11:12:32.215803] Registering candidate plugin; module='basicfuncs', context='template-func', name='substr'
[2018-04-06T11:12:32.215823] Registering candidate plugin; module='basicfuncs', context='template-func', name='strip'
[2018-04-06T11:12:32.215844] Registering candidate plugin; module='basicfuncs', context='template-func', name='sanitize'
[2018-04-06T11:12:32.215865] Registering candidate plugin; module='basicfuncs', context='template-func', name='lowercase'
[2018-04-06T11:12:32.215886] Registering candidate plugin; module='basicfuncs', context='template-func', name='uppercase'
[2018-04-06T11:12:32.215907] Registering candidate plugin; module='basicfuncs', context='template-func', name='replace-delimiter'
[2018-04-06T11:12:32.215928] Registering candidate plugin; module='basicfuncs', context='template-func', name='padding'
[2018-04-06T11:12:32.215949] Registering candidate plugin; module='basicfuncs', context='template-func', name='binary'
[2018-04-06T11:12:32.215970] Registering candidate plugin; module='basicfuncs', context='template-func', name='dirname'
[2018-04-06T11:12:32.215991] Registering candidate plugin; module='basicfuncs', context='template-func', name='basename'
[2018-04-06T11:12:32.216012] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-concat'
[2018-04-06T11:12:32.216033] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-head'
[2018-04-06T11:12:32.216054] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-nth'
[2018-04-06T11:12:32.216075] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-tail'
[2018-04-06T11:12:32.216096] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-slice'
[2018-04-06T11:12:32.216117] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-count'
[2018-04-06T11:12:32.216138] Registering candidate plugin; module='basicfuncs', context='template-func', name='list-append'
[2018-04-06T11:12:32.216159] Registering candidate plugin; module='basicfuncs', context='template-func', name='+'
[2018-04-06T11:12:32.216180] Registering candidate plugin; module='basicfuncs', context='template-func', name='-'
[2018-04-06T11:12:32.216225] Registering candidate plugin; module='basicfuncs', context='template-func', name='*'
[2018-04-06T11:12:32.216247] Registering candidate plugin; module='basicfuncs', context='template-func', name='/'
[2018-04-06T11:12:32.216318] Registering candidate plugin; module='basicfuncs', context='template-func', name='%'
[2018-04-06T11:12:32.216410] Registering candidate plugin; module='basicfuncs', context='template-func', name='sum'
[2018-04-06T11:12:32.216432] Registering candidate plugin; module='basicfuncs', context='template-func', name='min'
[2018-04-06T11:12:32.216453] Registering candidate plugin; module='basicfuncs', context='template-func', name='max'
[2018-04-06T11:12:32.216474] Registering candidate plugin; module='basicfuncs', context='template-func', name='average'
[2018-04-06T11:12:32.216495] Registering candidate plugin; module='basicfuncs', context='template-func', name='ipv4-to-int'
[2018-04-06T11:12:32.216516] Registering candidate plugin; module='basicfuncs', context='template-func', name='indent-multi-line'
[2018-04-06T11:12:32.216537] Registering candidate plugin; module='basicfuncs', context='template-func', name='env'
[2018-04-06T11:12:32.216558] Registering candidate plugin; module='basicfuncs', context='template-func', name='template'
[2018-04-06T11:12:32.216579] Registering candidate plugin; module='cef', context='template-func', name='format-cef-extension'
[2018-04-06T11:12:32.216600] Registering candidate plugin; module='cryptofuncs', context='template-func', name='uuid'
[2018-04-06T11:12:32.216621] Registering candidate plugin; module='cryptofuncs', context='template-func', name='hash'
[2018-04-06T11:12:32.216641] Registering candidate plugin; module='cryptofuncs', context='template-func', name='sha1'
[2018-04-06T11:12:32.216662] Registering candidate plugin; module='cryptofuncs', context='template-func', name='sha256'
[2018-04-06T11:12:32.216683] Registering candidate plugin; module='cryptofuncs', context='template-func', name='sha512'
[2018-04-06T11:12:32.216704] Registering candidate plugin; module='cryptofuncs', context='template-func', name='md4'
[2018-04-06T11:12:32.216725] Registering candidate plugin; module='cryptofuncs', context='template-func', name='md5'
[2018-04-06T11:12:32.216746] Registering candidate plugin; module='csvparser', context='parser', name='csv-parser'
[2018-04-06T11:12:32.216840] Registering candidate plugin; module='date', context='parser', name='date-parser'
[2018-04-06T11:12:32.216863] Registering candidate plugin; module='dbparser', context='parser', name='db-parser'
[2018-04-06T11:12:32.216885] Registering candidate plugin; module='dbparser', context='parser', name='grouping-by'
[2018-04-06T11:12:32.216906] Registering candidate plugin; module='disk-buffer', context='inner-dest', name='disk_buffer'
[2018-04-06T11:12:32.216927] Registering candidate plugin; module='graphite', context='template-func', name='graphite_output'
[2018-04-06T11:12:32.216948] Registering candidate plugin; module='json-plugin', context='parser', name='json-parser'
[2018-04-06T11:12:32.216969] Registering candidate plugin; module='json-plugin', context='template-func', name='format_json'
[2018-04-06T11:12:32.216990] Registering candidate plugin; module='kvformat', context='parser', name='kv-parser'
[2018-04-06T11:12:32.217011] Registering candidate plugin; module='kvformat', context='parser', name='linux-audit-parser'
[2018-04-06T11:12:32.217033] Registering candidate plugin; module='kvformat', context='template-func', name='format-welf'
[2018-04-06T11:12:32.217054] Registering candidate plugin; module='linux-kmsg-format', context='format', name='linux-kmsg'
[2018-04-06T11:12:32.217075] Registering candidate plugin; module='map-value-pairs', context='parser', name='map_value_pairs'
[2018-04-06T11:12:32.217101] Registering candidate plugin; module='pseudofile', context='destination', name='pseudofile'
[2018-04-06T11:12:32.217123] Registering candidate plugin; module='sdjournal', context='source', name='systemd-journal'
[2018-04-06T11:12:32.217144] Registering candidate plugin; module='snmptrapd-parser', context='parser', name='snmptrapd-parser'
[2018-04-06T11:12:32.217166] Registering candidate plugin; module='stardate', context='template-func', name='stardate'
[2018-04-06T11:12:32.217212] Registering candidate plugin; module='syslogformat', context='format', name='syslog'
[2018-04-06T11:12:32.217235] Registering candidate plugin; module='syslogformat', context='parser', name='syslog-parser'
[2018-04-06T11:12:32.217256] Registering candidate plugin; module='system-source', context='source', name='system'
[2018-04-06T11:12:32.217785] Registering candidate plugin; module='tags-parser', context='parser', name='tags-parser'
[2018-04-06T11:12:32.217809] Registering candidate plugin; module='tfgetent', context='template-func', name='getent'
[2018-04-06T11:12:32.217864] Registering candidate plugin; module='xml', context='parser', name='xml'
[2018-04-06T11:12:32.219108] Finishing include; filename='/usr/share/syslog-ng/include/scl/apache/apache.conf', depth='2'
[2018-04-06T11:12:32.219296] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/cim/adapter.conf', depth='2'
[2018-04-06T11:12:32.223655] Module loaded and initialized successfully; module='appmodel'
[2018-04-06T11:12:32.224233] Finishing include; filename='/usr/share/syslog-ng/include/scl/cim/adapter.conf', depth='2'
[2018-04-06T11:12:32.224363] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/cim/template.conf', depth='2'
[2018-04-06T11:12:32.225628] Module loaded and initialized successfully; module='json-plugin'
[2018-04-06T11:12:32.226715] Finishing include; filename='/usr/share/syslog-ng/include/scl/cim/template.conf', depth='2'
[2018-04-06T11:12:32.226802] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/cisco/plugin.conf', depth='2'
[2018-04-06T11:12:32.227266] Finishing include; filename='/usr/share/syslog-ng/include/scl/cisco/plugin.conf', depth='2'
[2018-04-06T11:12:32.227342] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/default-network-drivers/plugin.conf', depth='2'
[2018-04-06T11:12:32.227607] Finishing include; filename='/usr/share/syslog-ng/include/scl/default-network-drivers/plugin.conf', depth='2'
[2018-04-06T11:12:32.227686] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/elasticsearch/plugin.conf', depth='2'
[2018-04-06T11:12:32.228265] Finishing include; filename='/usr/share/syslog-ng/include/scl/elasticsearch/plugin.conf', depth='2'
[2018-04-06T11:12:32.228345] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/ewmm/ewmm.conf', depth='2'
[2018-04-06T11:12:32.229071] Finishing include; filename='/usr/share/syslog-ng/include/scl/ewmm/ewmm.conf', depth='2'
[2018-04-06T11:12:32.229151] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/graphite/plugin.conf', depth='2'
[2018-04-06T11:12:32.229368] Finishing include; filename='/usr/share/syslog-ng/include/scl/graphite/plugin.conf', depth='2'
[2018-04-06T11:12:32.229440] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/graylog2/plugin.conf', depth='2'
[2018-04-06T11:12:32.230532] Module loaded and initialized successfully; module='basicfuncs'
[2018-04-06T11:12:32.230652] Finishing include; filename='/usr/share/syslog-ng/include/scl/graylog2/plugin.conf', depth='2'
[2018-04-06T11:12:32.230732] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/hdfs/plugin.conf', depth='2'
[2018-04-06T11:12:32.230974] Finishing include; filename='/usr/share/syslog-ng/include/scl/hdfs/plugin.conf', depth='2'
[2018-04-06T11:12:32.231046] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/iptables/iptables.conf', depth='2'
[2018-04-06T11:12:32.231362] Finishing include; filename='/usr/share/syslog-ng/include/scl/iptables/iptables.conf', depth='2'
[2018-04-06T11:12:32.231445] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/kafka/plugin.conf', depth='2'
[2018-04-06T11:12:32.231676] Finishing include; filename='/usr/share/syslog-ng/include/scl/kafka/plugin.conf', depth='2'
[2018-04-06T11:12:32.231758] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/loadbalancer/plugin.conf', depth='2'
[2018-04-06T11:12:32.233393] Module loaded and initialized successfully; module='confgen'
[2018-04-06T11:12:32.233636] Finishing include; filename='/usr/share/syslog-ng/include/scl/loadbalancer/plugin.conf', depth='2'
[2018-04-06T11:12:32.233740] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/loggly/loggly.conf', depth='2'
[2018-04-06T11:12:32.234023] Finishing include; filename='/usr/share/syslog-ng/include/scl/loggly/loggly.conf', depth='2'
[2018-04-06T11:12:32.234104] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/logmatic/logmatic.conf', depth='2'
[2018-04-06T11:12:32.234603] Finishing include; filename='/usr/share/syslog-ng/include/scl/logmatic/logmatic.conf', depth='2'
[2018-04-06T11:12:32.234686] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/mbox/mbox.conf', depth='2'
[2018-04-06T11:12:32.234879] Finishing include; filename='/usr/share/syslog-ng/include/scl/mbox/mbox.conf', depth='2'
[2018-04-06T11:12:32.234969] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/nodejs/plugin.conf', depth='2'
[2018-04-06T11:12:32.235157] Finishing include; filename='/usr/share/syslog-ng/include/scl/nodejs/plugin.conf', depth='2'
[2018-04-06T11:12:32.235254] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/osquery/plugin.conf', depth='2'
[2018-04-06T11:12:32.235626] Finishing include; filename='/usr/share/syslog-ng/include/scl/osquery/plugin.conf', depth='2'
[2018-04-06T11:12:32.235703] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/pacct/plugin.conf', depth='2'
[2018-04-06T11:12:32.235885] Finishing include; filename='/usr/share/syslog-ng/include/scl/pacct/plugin.conf', depth='2'
[2018-04-06T11:12:32.235963] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/rewrite/cc-mask.conf', depth='2'
[2018-04-06T11:12:32.236179] Global value changed; define='balabit.credit-card-regexp', value='(:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|6(?:011|5[0-9][0-9])[0-9]{12}|3[47][0-9]{13}|3(?:0[0-5]|[68][0-9])[0-9]{11}|(?:2131|1800|35d{3})d{11})'
[2018-04-06T11:12:32.236353] Finishing include; filename='/usr/share/syslog-ng/include/scl/rewrite/cc-mask.conf', depth='2'
[2018-04-06T11:12:32.236433] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/snmptrap/snmptrapd-source.conf', depth='2'
[2018-04-06T11:12:32.236625] Finishing include; filename='/usr/share/syslog-ng/include/scl/snmptrap/snmptrapd-source.conf', depth='2'
[2018-04-06T11:12:32.236700] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/solaris/plugin.conf', depth='2'
[2018-04-06T11:12:32.236891] Finishing include; filename='/usr/share/syslog-ng/include/scl/solaris/plugin.conf', depth='2'
[2018-04-06T11:12:32.236969] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/sudo/sudo.conf', depth='2'
[2018-04-06T11:12:32.237266] Finishing include; filename='/usr/share/syslog-ng/include/scl/sudo/sudo.conf', depth='2'
[2018-04-06T11:12:32.237343] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/syslogconf/plugin.conf', depth='2'
[2018-04-06T11:12:32.237621] Module loaded and initialized successfully; module='confgen'
[2018-04-06T11:12:32.237667] Finishing include; filename='/usr/share/syslog-ng/include/scl/syslogconf/plugin.conf', depth='2'
[2018-04-06T11:12:32.237741] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/system/plugin.conf', depth='2'
[2018-04-06T11:12:32.237906] Finishing include; filename='/usr/share/syslog-ng/include/scl/system/plugin.conf', depth='2'
[2018-04-06T11:12:32.237975] Starting to read include file; filename='/usr/share/syslog-ng/include/scl/windowseventlog/plugin.conf', depth='2'
[2018-04-06T11:12:32.238169] Finishing include; filename='/usr/share/syslog-ng/include/scl/windowseventlog/plugin.conf', depth='2'
[2018-04-06T11:12:32.239372] Global value changed; define='java-module-dir', value='//usr/lib64/syslog-ng/java-modules'
[2018-04-06T11:12:32.239620] Finishing include; filename='/etc/syslog-ng/scl.conf', depth='1'
[2018-04-06T11:12:32.241686] Module loaded and initialized successfully; module='system-source'
[2018-04-06T11:12:32.242605] Module loaded and initialized successfully; module='sdjournal'
[2018-04-06T11:12:32.242905] Finishing include; content='parser generator app-parser', depth='2'
[2018-04-06T11:12:32.244260] Module loaded and initialized successfully; module='kvformat'
[2018-04-06T11:12:32.244364] Finishing include; content='parser generator iptables-parser', depth='3'
[2018-04-06T11:12:32.245212] Module loaded and initialized successfully; module='csvparser'
[2018-04-06T11:12:32.245414] Finishing include; content='parser generator sudo-parser', depth='3'
[2018-04-06T11:12:32.245477] Finishing include; content='parser generator app-parser', depth='2'
[2018-04-06T11:12:32.245542] Finishing include; content='source generator system', depth='1'
[2018-04-06T11:12:32.246421] Module loaded and initialized successfully; module='affile'
[2018-04-06T11:12:32.247513] Module loaded and initialized successfully; module='afuser'
[2018-04-06T11:12:32.248470] Adding include file; filename='/etc/syslog-ng/conf.d/es.conf', depth='1'
[2018-04-06T11:12:32.248519] Starting to read include file; filename='/etc/syslog-ng/conf.d/es.conf', depth='1'
Error parsing destination, destination plugin java not found in destination generator elasticsearch2 at line 2, column 3:
                                                  included from /etc/syslog-ng/conf.d/es.conf line 11, column 3
                                                  included from /etc/syslog-ng/syslog-ng.conf line 68, column 1

  java
  ^^^^

syslog-ng documentation: https://www.balabit.com/support/documentation?product=syslog-ng-ose
contact: https://lists.balabit.hu/mailman/listinfo/syslog-ng

-----Mensagem original-----
De: syslog-ng [mailto:syslog-ng-bounces at lists.balabit.hu] Em nome de Fabien Wernli
Enviada em: sexta-feira, 6 de abril de 2018 11:02
Para: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu>
Assunto: Re: [syslog-ng] RES: Problem activating: Centos7 + Syslog-ng OSE + Elasticsearch + kibana

On Fri, Apr 06, 2018 at 10:56:35AM -0300, André Grehs wrote:
> [root at syslog conf.d]# /usr/sbin/syslog-ng -V syslog-ng 3.5.6

That's too old.
You want the newer packages not from your regular yum repo:

https://syslog-ng.com/3rd-party-binaries

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq