[syslog-ng] trouble using kubernetes source

Evan Rempel erempel at uvic.ca
Thu May 22 21:32:46 UTC 2025


Thanks.

I had to install all auxiliary syslog-ng packages and do a recursive grep to find it. Then trace the found file back to the rpm needed. Finally remove all of the auxiliary packages and install just the one I needed.

syslog-ng-python-modules

Which had a dependency on

syslog-ng-python

I have what I need now.

Thanks.


--
Evan
________________________________
From: syslog-ng <syslog-ng-bounces at lists.balabit.hu> on behalf of Balazs Scheidler <bazsi77 at gmail.com>
Sent: May 22, 2025 2:05 PM
To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu>
Subject: Re: [syslog-ng] trouble using kubernetes source

You don't often get email from bazsi77 at gmail.com. Learn why this is important<https://aka.ms/LearnAboutSenderIdentification>
Kubernetes used Python under the hood, so the kubernetes source might be packaged along with the python package.

On Thu, May 22, 2025, 22:30 Evan Rempel <erempel at uvic.ca<mailto:erempel at uvic.ca>> wrote:
I'm running syslog-ng-4.8.1-2.el8.x86_64  from the copr stable repository.

I'm trying to configure the kubernetes() source.

By compete configuration file is

@version: 4.8
@include 'scl.conf'
source s_k8s {
    kubernetes();
};

When I check this syntax

Error parsing config, syntax error, unexpected LL_IDENTIFIER, expecting '}' in /etc/syslog-ng/kubernetes.conf:7:5-7:15:
2
3       @include 'scl.conf'
4
5
6       source s_k8s {
7----->     kubernetes();
7----->     ^^^^^^^^^^
8       };


I can't find any information on where the kubernets source is defined.
Is this defined in a scl include?
Do I need another rpm package?
Do I need to load a module?

What is my next step?

--
Evan
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20250522/42f4c4db/attachment-0001.htm>


More information about the syslog-ng mailing list