[syslog-ng] Help needed in configuration file upgrade (from syslog-ng-3.11.1 to syslog-ng-3.23.1)

[Attila Szakacs (aszakacs)]

Hi,

Could you run syslog-ng with -Fedtv flags and share the output?

Best regards,
Attila
________________________________
From: syslog-ng <syslog-ng-bounces at lists.balabit.hu> on behalf of Debananda Pal <debananda.pal at gmail.com>
Sent: Wednesday, September 25, 2019 4:55 PM
To: syslog-ng at lists.balabit.hu <syslog-ng at lists.balabit.hu>
Subject: [syslog-ng] Help needed in configuration file upgrade (from syslog-ng-3.11.1 to syslog-ng-3.23.1)

CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.

Hi All,

Sorry to send the mail to all as I am not aware about individual email id.

I am trying to upgrade syslog-ng from 3.11.1  to  3.23.1 on Linux and finding some issues as below.
I have changed few parameters like version, include, but at present getting error with file() configuration.
-------------------------------------------------------------------------------------
~ # /sbin/syslog-ng -f /tandberg/persistent/syslog-ng.conf -p /var/run/syslog-ng.pid
[2019-09-25T13:40:11.707232] WARNING: Your configuration file uses an obsoleted keyword, please update your configuration; key
word='flush_timeout', change='Some drivers support batch-timeout() instead that you can specify at the destination level.', lo
cation='#buffer:15:5'
Error parsing source statement, source plugin file not found in /tandberg/persistent/syslog-ng.conf:31:5-31:9:
26
27      #   Sources
28
29      source s_everything {
30          internal();
31---->     file("/proc/kmsg" log_fetch_limit(100) log_iw_size(100));
31---->     ^^^^
32          unix_dgram("/var/log/log" log_fetch_limit(100) log_iw_size(100));
33          udp(ip(127.0.0.1) port(514) log_fetch_limit(100) log_iw_size(100));
34      };
35
36      #   Destinations

syslog-ng documentation: https://www.balabit.com/support/documentation?product=syslog-ng-ose<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%3Fproduct%3Dsyslog-ng-ose&data=02%7C01%7Cattila.szakacs%40oneidentity.com%7Cd2c903a2e4a4413f453808d741c87af4%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637050201639994233&sdata=zD%2FNYgPCUXIsuA79b5dkALKVfc%2BVS1AFGtdqJgykemI%3D&reserved=0>
contact: https://lists.balabit.hu/mailman/listinfo/syslog-ng<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=02%7C01%7Cattila.szakacs%40oneidentity.com%7Cd2c903a2e4a4413f453808d741c87af4%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637050201640004226&sdata=i7oD1DjUEEBoEV7rhAZMjzcOgjH%2BhMJ5uBO%2BgVYe2o8%3D&reserved=0>
~ #
-------------------------------------------------------------------------------------

I have attached the syslog-ng.conf file for your kind perusal.
Please give your suggestion on the modified config file.

Regards,
D Pal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20190926/180702e1/attachment-0001.html>