[prev in list] [next in list] [prev in thread] [next in thread]
List: syslog-ng
Subject: Re: [syslog-ng] Another beginners problem
From: Andy Kannberg <andy.kannberg () gmail ! com>
Date: 2009-07-16 7:49:26
Message-ID: 2757a8ab0907160049i3e626442h15a4370073ecde0f () mail ! gmail ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
It said FAIL in capital red lettlers.
However, restarting the syslog-ng daemon went ok. Reloading again also went
ok. So, I guess that problem is solved. However, I have no clue why it
failed.
I've checked overnight, and the logging works like a charm now.
cheers & thanks for the fast response !
Andy
2009/7/15 Fegan, Joe <Joe.Fegan@hp.com>
> > the reload fails, giving no kind of warning or message whatsoever
>
> So in what sense does it fail?
> ------------------------------
> *From:* syslog-ng-bounces@lists.balabit.hu [mailto:
> syslog-ng-bounces@lists.balabit.hu] *On Behalf Of *Andy Kannberg
> *Sent:* 15 July 2009 15:45
> *To:* syslog-ng@lists.balabit.hu
> *Subject:* [syslog-ng] Another beginners problem
>
> Hi folks,
>
> I'm new to syslog-ng. I'm trying to get it running on a bunch of Ubuntu
> 8.04 LTS and OEL 5.3 systems.
> For a start, I'm trying to get it working on 2 Ubuntu 8.04 LTS boxes.
> What I want is that all logging of all systems is sent to a central
> loghost. Systems do not need to keep a local logfile.
>
> So, I've shamelesly copied over a (as said working) config from another
> thread a few days ago on this list.
> The client part works, at least, the reload goed ok. However, on the
> server, the reload fails, giving no kind of warning or message whatsoever to
> hint where the problem lies.
>
> The configuration is as follows (With thanks to Siem Korteweg, from whom I
> copied the config over).
>
> Client & server:
>
> source s_internal { internal(); };
>
> destination d_syslogng_log { file("/var/log/syslog-ng.log"); };
>
> source s_local {
> unix-dgram("/dev/log");
> file("/proc/kmsg" program_override("kernel:"));
> };
>
> destination d_remote { tcp("10.0.13.152" port(514) ) ; };
>
> destination d_local { file("/var/log/messages"); };
>
> log { source( s_internal ); destination( d_remote ); };
> log { source( s_internal ); destination( d_syslogng_log ); };
> log { source( s_local ); destination( d_remote ); };
> log { source( s_local ); destination( d_local ); };
>
>
> On the central loghost, adittional lines are added:
>
> source s_network { tcp (ip("10.0.13.152") port(514)); };
>
> destination d_network {
> file("/var/log/syslog-ng/hosts/$HOST_FROM/$R_YEAR/$R_MONTH/$R_YEAR-$R_MONTH-$R_DAY"
> create_dirs(yes)); };
> log { source( s_network ); destination( d_network ); };
>
> But, as said, a reload fails. Can someone help me out a little ?
> Oh, I am running syslog-ng 3.03, installed from the .deb package available
> on the website of Balabit.
>
> cheers and thanks in advance.
>
> Andy
>
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
>
>
>
[Attachment #5 (text/html)]
It said FAIL in capital red lettlers.<br>However, restarting the syslog-ng daemon \
went ok. Reloading again also went ok. So, I guess that problem is solved. However, I \
have no clue why it failed.<br>I've checked overnight, and the logging works like \
a charm now.<br> <br>cheers & thanks for the fast response \
!<br><br>Andy<br><br><br><br><br><div class="gmail_quote">2009/7/15 Fegan, Joe <span \
dir="ltr"><<a href="mailto:Joe.Fegan@hp.com">Joe.Fegan@hp.com</a>></span><br><blockquote \
class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt \
0pt 0.8ex; padding-left: 1ex;">
<div><div class="im">
<div dir="ltr" align="left"><span>> </span>the reload
fails, giving no kind of warning or message whatsoever </div>
<div> </div>
</div><div><span></span><span>S</span><span>o in what sense
does it fail?</span><br></div>
<div dir="ltr" align="left" lang="en-us">
<hr>
<font size="2" face="Tahoma"><b>From:</b> <a \
href="mailto:syslog-ng-bounces@lists.balabit.hu" \
target="_blank">syslog-ng-bounces@lists.balabit.hu</a> [mailto:<a \
href="mailto:syslog-ng-bounces@lists.balabit.hu" \
target="_blank">syslog-ng-bounces@lists.balabit.hu</a>] <b>On Behalf Of </b>Andy \
Kannberg<br><b>Sent:</b> 15 July 2009 15:45<br><b>To:</b> <a \
href="mailto:syslog-ng@lists.balabit.hu" \
target="_blank">syslog-ng@lists.balabit.hu</a><br><b>Subject:</b> [syslog-ng] Another \
beginners problem<br></font><br></div><div><div></div><div class="h5">
<div></div>Hi folks,<br><br>I'm new to syslog-ng. I'm trying to get it \
running on a bunch of Ubuntu 8.04 LTS and OEL 5.3 systems.<br>For a start, I'm \
trying to get it working on 2 Ubuntu 8.04 LTS boxes. <br>What I want is that all \
logging of all systems is sent to a central loghost. Systems do not need to keep a \
local logfile. <br><br>So, I've shamelesly copied over a (as said working) \
config from another thread a few days ago on this list. <br>The client part works, \
at least, the reload goed ok. However, on the server, the reload fails, giving no \
kind of warning or message whatsoever to hint where the problem lies.<br><br>The
configuration is as follows (With thanks to Siem Korteweg, from whom I copied
the config over). <br><br>Client & server:<br><br>source s_internal {
internal(); };<br><br>destination d_syslogng_log {
file("/var/log/syslog-ng.log"); };<br><br>source s_local
{<br>
unix-dgram("/dev/log");<br>
file("/proc/kmsg"
program_override("kernel:"));<br>
};<br><br>destination d_remote { tcp("10.0.13.152" port(514) ) ;
};<br><br>destination d_local { file("/var/log/messages"); };<br><br>log {
source( s_internal ); destination( d_remote ); };<br>log
{ source( s_internal ); destination( d_syslogng_log );
};<br>log { source( s_local );
destination( d_remote ); };<br>log { source( s_local
); destination( d_local );
};<br><br><br>On the central loghost, adittional lines are added:<br><br>source
s_network { tcp (ip("10.0.13.152") port(514)); };<br><br>destination
d_network {
file("/var/log/syslog-ng/hosts/$HOST_FROM/$R_YEAR/$R_MONTH/$R_YEAR-$R_MONTH-$R_DAY" \
create_dirs(yes)); };<br>log { source( s_network
); destination( d_network ); };<br><br>But, as
said, a reload fails. Can someone help me out a little ? <br>Oh, I am running
syslog-ng 3.03, installed from the .deb package available on the website of
Balabit.<br><br>cheers and thanks in advance. <br><br>Andy<br><br></div></div></div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" \
target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" \
target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.campin.net/syslog-ng/faq.html" \
target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br> <br>
<br></blockquote></div><br>
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.campin.net/syslog-ng/faq.html
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic