[syslog-ng] What Im missing to enable the wildcard-file module?

Kókai Péter peter.kokai at balabit.com
Thu Apr 12 03:56:55 UTC 2018


Hello,

The wildcard file source was introduced in thr 3.10 version. Please try at
least that version.

The latest syslog-ng version is 3.14.

--
Kokan

On Thu, 12 Apr 2018, 1:22 am Eric Anderson, <eric.anderson at stonecroptech.com>
wrote:

> Im trying to use the wildcard-file module, but the syslog-ng Module:
> wildcard-file is missing
>
>
>
> # service syslog-ng start
>
> Error parsing source, source plugin wildcard-file not found in
> /etc/syslog-ng/conf.d/export-client.conf at line 4, column 29:
>
>                                                  included from
> /etc/syslog-ng/syslog-ng.conf line 71, column 1
>
>
>
> source s_export_recursive { wildcard-file(
>
>                             ^^^^^^^^^^^^^
>
>
>
> I upgraded to the latest syslog-ng
>
>
>
> # syslog-ng -V
>
> syslog-ng 3.9.1
>
> Installer-Version: 3.9.1
>
> Revision:
>
> Module-Directory: //usr/lib64/syslog-ng
>
> Module-Path: //usr/lib64/syslog-ng
>
> Available-Modules:
> kvformat,afprog,afsocket,basicfuncs,linux-kmsg-format,graphite,cef,curl,add-contextual-data,date,json-plugin,pseudofile,afstomp,dbparser,confgen,cryptofuncs,syslogformat,disk-buffer,afuser,afamqp,csvparser,affile,system-source
>
> Enable-Debug: off
>
> Enable-GProf: off
>
> Enable-Memtrace: off
>
> Enable-IPv6: on
>
> Enable-Spoof-Source: off
>
> Enable-TCP-Wrapper: on
>
> Enable-Linux-Caps: on
>
>
>
> But I still don’t see where the wildcard-file is.
>
>
>
> *What Im missing to enable the wildcard-file module?*
>
>
>
> The conf file Ive created where I want to use it looks like this:
>
>
>
> # syslog-ng conf file for central logging CLIENT: export
>
> #
>
> # export source
>
> source s_export_recursive { wildcard-file(
>
>     base-dir("/var/www/capstan/shared/log/exports/")
>
>     filename-pattern("*.log")
>
>     recursive(yes)
>
>     follow-freq(1)
>
>     flags(no-parse)
>
>     log-fetch-limit(100)
>
>     ); };
>
> # export destination
>
> destination d_export_app1 { tcp(10.0.32.97 port(601)); };
>
> # export log
>
> log { source(s_export_recursive); destination(d_export_app1); };
>
>
>
>
>
> *Eric Anderson* | DevOps Engineer
>
> E: eric.anderson at stonecroptech.com <michaelg at stonecroptech.com> | O:
> 212.500.2017 | M: 650.743.4598
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20180412/895fc7bf/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 7249 bytes
Desc: not available
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20180412/895fc7bf/attachment.png>


More information about the syslog-ng mailing list