[syslog-ng] seems like program filter is broken

Stanislav me at rooty.name
Wed Mar 20 03:41:14 UTC 2019


Greetings,

I'm getting this issue after my last package upgrade

======================================
Name           : syslog-ng
Version        : 3.20.1
Installed on   : Mon Mar 11 23:27:29 2019 EET
Origin         : sysutils/syslog-ng
Architecture   : FreeBSD:12:amd64
Prefix         : /usr/local
Categories     : sysutils
Licenses       :
Maintainer     : cy at FreeBSD.org
WWW            : http://www.syslog-ng.org/
Comment        : Powerful syslogd replacement
Options        :
         AMQP           : off
         CURL           : off
         DOCS           : on
         GEOIP2         : off
         IPV6           : off
         JAVA           : off
         JAVA_MOD       : off
         JSON           : on
         MONGO          : off
         PYTHON         : off
         REDIS          : off
         RIEMANN        : off
         SMTP           : off
         SPOOF          : off
         SQL            : off
         TCP_WRAPPERS   : off
======================================



I have following configuration:

options { chain_hostnames(off); flush_lines(0); threaded(yes); 
create_dirs(yes); };
source local {
              internal();
              unix-dgram( "/var/run/log" owner(root) group(wheel) 
perm(0666) );
              unix-dgram( "/var/run/logpriv" owner(root) group(wheel) 
perm(0600) );
              file( "/dev/klog" program_override("kernel") );
};
...
destination all { file("/var/log/all.log"); };
destination maillog_mda { file("/var/log/maillog-mda"); };
...
filter p_mail_imap { program("dovecot"); };
...
log { source(local); destination(all); };
log { source(local); filter(p_mail_imap); destination(maillog_mda); };
======================================
# ps auxww|grep dovecot
root       9648   0.0  0.1   13268    4196  -  Is   00:46      0:00.04 
/usr/local/sbin/dovecot -c /usr/local/etc/dovecot/dovecot.conf
dovecot    9651   0.0  0.0   12724    3784  -  I    00:46      0:00.01 
anvil: [2 connections] (anvil)
root      15259   0.0  0.0   12796    4168  -  I    01:42      0:00.00 
dovecot/log
root      16126   0.0  0.1   13744    5020  -  I    01:52      0:00.02 
dovecot/config
dovecot   16127   0.0  0.0   12724    4180  -  I    01:52      0:00.01 
stats: [3 connections] (stats)
dovecot   17328   0.0  0.1   21284   12276  -  I    02:05      0:00.01 
auth: [0 wait, 0 passdb, 0 userdb] (auth)
======================================
# syslog-ng -s
# echo $?
0
======================================

I'm getting logs from dovecot program to /var/log/all.log but not 
/var/log/maillog-mda . As I mentioned before it was working on previous 
version of syslog-ng .
Does anybody have this issue? Just me, lucky?





More information about the syslog-ng mailing list