syslog-ng-users April 2011 archive
Main Archive Page > Month Archives  > syslog-ng-users archives
syslog-ng-users: Re: [syslog-ng] Question about syntax for sourc

Re: [syslog-ng] Question about syntax for source

From: Gergely Nagy <algernon_at_nospam>
Date: Sun Apr 03 2011 - 19:02:07 GMT
To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu>

Phusion <phusion2k@gmail.com> writes:

> When trying to convert this for syslog-ng 3.x under OpenBSD. I have an
> error. When I use syslog-ng -s -f ../syslog-ng.conf it works, but when
> I run syslog-ng -p /var/run/syslog-ng.pid, I get the following error.
>
> # /usr/local/sbin/syslog-ng -p /var/run/syslog-ng.pid
> WARNING: you are using the pipe driver, underlying file is not a FIFO,
> it should be used by file(); filename='/dev/klog'

The warning pretty much tells you what to do, and why: change pipe() to
file(), because /dev/klog appears to be something else than your common
pipe.

In syslog-ng 2.x, things worked a bit differently (the details escape
me, I'm afraid), which changed in 3.x, and thus, the warning is printed.

> Here is the current source line using syslog-ng 3.0 under OpenBSD 4.8.
>
> source local { internal(); pipe("/dev/klog" program_override("kernel:
> ")); unix-dgram("/dev/log"); };

Change it to something like this:

source local {
       internal();
       file("/dev/klog" program_override("kernel: "));
       unix-dgram("/dev/log");
};

And voila!

-- |8] ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html