Mailinglist Archive: opensuse (1196 mails)

< Previous Next >
[opensuse] Re: Syslog-ng can't forward
  • From: Joachim Schrod <jschrod@xxxxxxx>
  • Date: Wed, 06 Jan 2010 01:37:30 +0100
  • Message-id: <hi0m0a$jso$1@xxxxxxxxxxxxx>
Anton Aylward wrote:

#
# Enable this and adopt IP to send log messages to a log server.
#
destination logserver { udp("192.168.2.18" port(514)); };
log { source(src); destination(logserver); };

That's the IP address of my log server on the lcoal network and I have a
screen devoted to tailing though that with pretty colourization ...


However my local /var/log/messages reports

Jan 5 08:23:13 BigBoy syslog-ng[2693]: I/O error occurred while
writing; fd='10', error='Connection refused (111)'
Jan 5 08:23:13 BigBoy syslog-ng[2693]: Connection broken; time_reopen='60'

Eh? This is UDP isn't it? How can the connection be refused?

Are you sure that your logserver allows remote systems to send
syslog messages? That's not on by default.

On 192.168.2.18, issue the command "netstat -anu | grep 514". It
should output the line

udp 0 0 0.0.0.0:514 0.0.0.0:*


(The IP address may be 192.168.2.18 instead of 0.0.0.0.)

If not, the configuration issue is with your syslog server, not
with your BigBoy client.

If yes, I'd use nmap to see if BigBoy can reach the 514 udp port on
logserver.

HTH,
Joachim

--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Joachim Schrod Email: jschrod@xxxxxxx
Roedermark, Germany

--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

< Previous Next >
This Thread
  • No further messages