[syslog-ng] Configuration validation Issue with snmptrap module

Peter Kokai (pkokai) Peter.Kokai at oneidentity.com
Thu Jul 23 11:52:22 UTC 2020


Hello,

The afsnmp module is required for snmptrap, I do not see it in your modules list (Available-Modules).
Maybe you need to install additional package: syslog-ng-afsnmp (the exact name may differ).

--
Kokan

On Thu, Jul 23, 2020 at 08:33:58PM +0900, Luca Da Col wrote:
> CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.
> 
> Running syslog-ng 3.27.1 on Centos 7. Configuration validation returns an error with snmptrap command. Configuration example has been taken directly from the OSE documentation. Error error was reproducible with version available on epel repository (3.5), though documentation indicates the snmptrap is available from 3.10
> Configuration file includes statements:
> 
> @version:3.22
> @include "scl.conf"
> 
> Any assistance is appreciated,
> Thank you,
> Luca
> 
> 
> [root at adev syslog-ng]# syslog-ng --syntax-only
> Error parsing source statement, source plugin snmptrap not found in /etc/syslog-ng/syslog-ng.conf:92:5-92:13:
> 
> 
> 90      log {
> 91        source {
> 92---->     snmptrap(filename("/var/log/snmptrapd.log"));
> 92---->     ^^^^^^^^
> 93        };
> 94        destination {
> 95          file("/var/log/example.log");
> 96        };
> 97      };
> 
> 
> 
> [root at dev syslog-ng]# syslog-ng -V
> syslog-ng 3 (3.27.1)
> Config version: 3.22
> Installer-Version: 3.27.1
> Revision:
> Compile-Date: Jun  8 2020 07:54:17
> Module-Directory: /usr/lib64/syslog-ng
> Module-Path: /usr/lib64/syslog-ng
> Include-Path: /usr/share/syslog-ng/include
> Available-Modules: affile,afprog,afsocket,afstomp,afuser,basicfuncs,confgen,cryptofuncs,csvparser,dbparser,linux-kmsg-format,syslogformat,system-source,add-contextual-data,appmodel,cef,disk-buffer,examples,graphite,hook-commands,json-plugin,kvformat,map-value-pairs,pseudofile,sdjournal,stardate,tags-parser,tfgetent,timestamp,xml
> Enable-Debug: off
> Enable-GProf: off
> Enable-Memtrace: off
> Enable-IPv6: on
> Enable-Spoof-Source: on
> Enable-TCP-Wrapper: on
> Enable-Linux-Caps: on
> Enable-Systemd: on
> [root at dev syslog-ng]#

> ______________________________________________________________________________
> Member info: https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=02%7C01%7Cpeter.kokai%40oneidentity.com%7C92f8277a423243154aca08d82efc5397%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637311008566713007&sdata=2fV8iBkshWVJQTfXfupdi60%2F%2FqEzCZhQHG4XcMQ6czc%3D&reserved=0
> Documentation: https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=02%7C01%7Cpeter.kokai%40oneidentity.com%7C92f8277a423243154aca08d82efc5397%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637311008566713007&sdata=oYrFmksA5yozShkVrEFewiGOlHrSN%2B7dmagGI8Hd684%3D&reserved=0
> FAQ: https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=02%7C01%7Cpeter.kokai%40oneidentity.com%7C92f8277a423243154aca08d82efc5397%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637311008566723012&sdata=eeRL8VAynAn1IVmzcxYKmMqtUw19nGu2KSEizQFymL4%3D&reserved=0
> 


More information about the syslog-ng mailing list