[syslog-ng] syslog-ng version 26.1 running in a docker image from docker hub (balabit/syslog-ng)

[Martin, Uwe]

Hello,

We have a problem after an upgrade form syslog-ng version 3.5.6 to version 26.1 in a docker container.
CONTAINER ID        IMAGE                      COMMAND                  CREATED             STATUS              PORTS               NAMES
d8c8c3380a71        balabit/syslog-ng:3.26.1   "/usr/sbin/syslog-..."   About an hour ago   Up About an hour

Now not all logs from the devices are seen and forwarding to another log gateway is also not working. With tcpdump I see the packets on the interface. I seems some filter will not work. I add our config. Anybody an idea how to troubleshoot or fix this problem?

Kind regards

Uwe


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20201113/ed9a1a91/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cisco-switches.conf
Type: application/octet-stream
Size: 1848 bytes
Desc: cisco-switches.conf
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20201113/ed9a1a91/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: forward2SOC.conf
Type: application/octet-stream
Size: 2073 bytes
Desc: forward2SOC.conf
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20201113/ed9a1a91/attachment-0001.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: syslog-ng.conf
Type: application/octet-stream
Size: 3521 bytes
Desc: syslog-ng.conf
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20201113/ed9a1a91/attachment-0002.obj>