-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday, 2008-12-02 at 15:58 -0600, Peter Van Lone wrote:
following this:
http://www.novell.com/coolsolutions/feature/18044.html
I'm trying to get syslog-ng on a SLES server to accept incoming syslogging from external devices (an ADTRAN dsu/csu, and some cisco switches). However, the document says to exit /etc/syslog-ng/syslog-ng.in and that file does not seem to exist on my SLES 10 SP2 box. So, I edited instead the file below. It does not appear that the ADTRAN unit has actually dumped anything to this server (which seems impossible) -- either that, or for whatever reason (because I have kludged up the conf file, perhaps??) syslog-ng just has not created any directories or accepted any logging. The firewall is off and I did make sure that syslog-ng is running.
Is there anything obvious that I have missed, or something that I can try?
I can tell you what I use on openSUSE (not sles). First, about "/etc/syslog-ng/syslog-ng.in": it was used during the transition of syslog to syslog-ng, and then it was dropped in the following openSUSE version. source src { ... original entries, not modified. }; source ext { udp(ip("0.0.0.0") port(514)); }; And then, it is business as usual, with two different sources (which makes easier separating local and remote entries): log { source(src); filter(f_console); destination(xconsole); }; log { source(ext); filter(f_router); destination(router); }; etc.
#this is for separating out network hosts into individual log files destination std { file ("/var/log/HOSTS/$YEAR-$MONTH/$HOST/$FACILITY-$YEAR-$MONTH-$DAY" owner(root) group(root) perm(0600) dir_perm(0700) create_dirs (y\es) );
I was not aware of this syntax :-? [...] Ah, ok, I see it, syslog-ng.txt file. Then, I would first try with a fixed file, so that you get all entries from the outside hosts there, and when it works, continue with the variable names. The problem with syslog-ng is that it doesn't report errors in your configuration file: it simply does not work. It seems easy, but it is not :-( - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEYEARECAAYFAkk1xQYACgkQtTMYHG2NR9UmpACeNN8Q0x9DzCPpGoczSvwq/FeE Ry4An1Ontv7y0AbFMAOfOmxQPGDQozuB =o47V -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org