[syslog-ng] Trouble configuring elasticsearch2 destination

[Szemere, László]

Hello,
 I successfully reproduced the crash with your configuration. The problem
was in the *padding* template function, and has nothing to do with the
earlier java problems.
 If you intended to use the default (space) character for padding, you
don't have to provide the third argument to the function. (Or provide the
space character explicitly: *'' -> ' '*)

 The problem exist, because in the padding function we divide with the
length of the provided padding string

https://github.com/balabit/syslog-ng/blob/aa88bba2a9158fb6401bc260e0a58d7784c7bab4/modules/basicfuncs/str-funcs.c#L425


 I will create a pull request to correct it.

Br,
Laci



On Thu, Jul 5, 2018 at 11:16 AM, Fabien Wernli <wernli at in2p3.fr> wrote:

> On Thu, Jul 05, 2018 at 11:05:21AM +0200, T4iga wrote:
> > Hi Fabien Wernli,
> >
> > it says
> > sysctl kernel.core_pattern
> > kernel.core_pattern = |/usr/lib/systemd/systemd-coredump %P %u %g %s %t
> %c
> > %e
>
> Oh my...
>
> At least we now know who takes care of your core file!
> Reading
> https://www.freedesktop.org/software/systemd/man/systemd-coredump.html
> will
> probably help
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20180705/b89777b5/attachment.html>