[syslog-ng] can not load geoip2 plugin

[Balazs Scheidler]

Syslog-ng has automatic demand loading so I dont know why you need it
explicitly.

Sometimes we do change module names with the expectation that users
wouldn't even notice.

To see what modules syslog-ng can discover, try the --module-registry
option for the syslog-ng executable. It should print all of the modules we
discovered.

The issue in this case seems to be that the name of the module is
geoip2-plugin in contrast to geoip2 that you are using.

Hth,
Bazsi


On Tue, Apr 7, 2020, 21:49 Russell Fulton <r.fulton at auckland.ac.nz> wrote:

> HI
>
> This is a locally compiled application (version 3.26.1) and I am trying to
> get the geoip2 stuff working.  I had similar problems a week or two back
> with elasticsearch_http destination plugin.  This seems like it might be
> easier to diagnose since the error says where it is looking for the plugin.
>
> rful011 at secmgrprd02:~$ /usr/local/syslog-ng-3.26.1/sbin/syslog-ng  -s -f
> /etc/syslog-ng/geoip.conf
> [2020-04-08T07:30:19.551845] Plugin module not found in 'module-path';
> module-path='/usr/local/syslog-ng-3.26.1/lib/syslog-ng', module='geoip2'
> Error parsing config, syntax error, unexpected LL_ERROR, expecting $end in
> /etc/syslog-ng/geoip.conf:4:1-5:1:
> 1       @version: 3.21
> 2
> 3       @include "scl.conf"
> 4-----> @module geoip2
> 4-----> ^^^^^^^^^^^^^^^
> 5-----> #
> 6
> 7       options {
> 8               use_dns (no);
> 9               use_fqdn (no);
>
> rful011 at secmgrprd02:~$ ls -l
> /usr/local/syslog-ng-3.26.1/lib/syslog-ng/libgeoip2-plugin.*
> -rwxr-xr-x 1 root root   1271 Mar 31 08:57
> /usr/local/syslog-ng-3.26.1/lib/syslog-ng/libgeoip2-plugin.la
> -rwxr-xr-x 1 root root 158912 Mar 31 08:57
> /usr/local/syslog-ng-3.26.1/lib/syslog-ng/libgeoip2-plugin.so
>
>
> any ideas why it is not loading the library?
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20200407/7682462b/attachment.html>