[syslog-ng] Trouble configuring elasticsearch2 destination

[T4iga]

Hi Fabien Wernli,

yes, as per my mail from 2018-07-04T16:21

running
syslog-ng -Fdv
always ends in
[2018-07-04T16:15:27.124682] <<<<<< filter rule evaluation result;
result='MATCH - Forwarding message to the next LogPipe', rule='f_noDebug',
location='/etc/syslog-ng/syslog-ng.conf:85:19', msg='0x7ff5a40168c0'
[2018-07-04T16:15:27.124696] <<<<<< filter rule evaluation result;
result='MATCH - Forwarding message to the next LogPipe',
rule='f_checkpoints', location='/etc/syslog-ng/syslog-ng.conf:98:23',
msg='0x7ff5a40168c0'
[2018-07-04T16:15:27.124709] <<<<<< Source side message processing finish;
instance='0.0.0.0', location='/etc/syslog-ng/syslog-ng.conf:33:2',
msg='0x7ff5a40168c0'
Floating point exception (core dumped)

I have recently sent a mail containint the dump file i could not open with
gdb which has to be review by a mod because the dump is 240k in size
exceeding the 200k unmoderated limit.

Sincerely
Niklas Deffner

PS: Thank you for all the gratious help and time you spent on helping me so
far, @everyone.



2018-07-05 9:53 GMT+02:00 Fabien Wernli <wernli at in2p3.fr>:

> On Wed, Jul 04, 2018 at 05:32:29PM +0200, T4iga wrote:
> > Hi,
> >
> > as per this:
> > https://www.syslog-ng.com/syslog-ng-faq/
> > I ran
> > ulimit -c unlimited
> > syslog-ng -Fdv
> > so it should place the core dump in the current locatioin which it
> doesn't.
> > I checked the suggested path to but it is not there so I am currently
> > unable to provide you with the back trace.
>
> does it say "core dumped" or not?
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20180705/34f01d71/attachment.html>