[syslog-ng] Error binding socket;

vinod samant vinod.samant.123 at gmail.com
Mon May 14 13:08:16 UTC 2018


Hi Gergely,
My configuration my of both client and server side.

>>>>>>>>>>>>>>>>>>>>>>>>>>>>client confg<<<<<<<<<<<<<<<<<<<<<<<<<<<
@version:3.13
@include "scl.conf"
@define allow-config-dups 1

#options {
#    flush_lines (0);
#    time_reopen (10);
#    log_fifo_size (1000);
#    chain_hostnames (off);
#    use_dns (no);
#    use_fqdn (no);
#    create_dirs (no);
#    keep_hostname (yes);
#};

source s_local {
    system();
    internal();

};
destination d_network {udp("192.168.122.67" port(514));

};

destination d_local {
            file("/var/log/messages");
};

log{
   source(s_local);
   destination(d_network);
   destination(d_local);

};

source s_local{
          wildcard-file(
          base-dir("/usr/local/apache/logs")
          filename-pattern("*.log")
          recursive(no)
          follow-freq(1));
};

destination d_network {tcp("192.168.122.67" port(514));

};

log{
   source(s_local);
   destination(d_network);

};

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>server side
cong<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
@version:3.13
@include "scl.conf"

source s_local{system(); internal();};
source s_network{

         udp();
         tcp();

};

destination d_local{file("/var/log/messages");};
destination d_from_net{file("/var/log/from_net");};
log{
   source(s_local);
   destination(d_local);
};
log { source(s_network); destination(d_from_net); };


source s_net {
  network(flags(no-parse));
};

parser p_apache {
  csv-parser(
    columns("apache.FILE_NAME", "apache.MESSAGE")
    flags(greedy)
  );
};
destination d_apache {
  file("/usr/local/apache/logs/${apache.FILE_NAME}"
       template("${apache.MESSAGE}\n"));
};

log{
   source (s_net);
   parser (p_apache);
   destination(d_apache);
};





*Thanks & Regards :-*

*VINOD SINGH SAUD*

*(M):- 09718663552*

*(W):-09997645597*

*(E) :- vinod.samant.123 at gmail.com <vinod.samant.123 at gmail.com>*

On Mon, May 14, 2018 at 5:30 PM, Gergely Nagy <algernon at balabit.com> wrote:

> >>>>> "vinod" == vinod samant <vinod.samant.123 at gmail.com> writes:
>
>     vinod> When  i am going to comment those lines on server side
> ,syslog-ng is
>     vinod> working fine ,But all logs are coming in one file
>     vinod> */var/log/from_net .*
>
> Can you show us your *full* configuration, including any included config
> files? In the samples I showed, there is no `/var/log/from_net`, so my
> suspicion is that some other part of your configuration sets up a
> similar source, and a logpath that routes those logs elsewhere.
>
>     vinod> *Is it necessary to define port in server side configuration
>     vinod> file also?*
>
> No, it has a default port, and the client side will use the same default
> port when no port is specified. But if you do specify a different port
> on either side, the other one will have to be adapted too.
>
>     vinod> *Can you share  wildcard configuration for both server side and
> cilent
>     vinod> side?*
>
> I did, a few messages ago.
>
> --
> |8]
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20180514/2b14f859/attachment.html>


More information about the syslog-ng mailing list