Centralized syslog-ng on RHEL4

gurl4sh25 · 05-11-2007, 05:32 AM

Hi Guys,

It's me again, thanks to acid_kewpie, for helping me on syslog issue, right now i'ved manage to install syslog-ng on rhel4, just got the package on rpm-pbone.net, every thing was successfully installed problem is when i try to run it, i'ved encountered a problem, any idea guys?

[root@localhost etc]# service syslog-ng start
Starting system logger: Error opening file for reading; filename='/proc/kmsg', error='Permission denied (13)'
Error initializing source driver; source='s_sys'

acid_kewpie · 05-12-2007, 01:14 AM

quite likely to be selinux getting in the way. check the syslog-ng faq, and also run "dmesg" and look for selinux in there (will start "avc" and mention things like "contexts"). conventional solution is to disable selinux...

btw, you *really* should also check out splunk...

gurl4sh25 · 05-14-2007, 09:14 PM

Hi acid_kewpie,

Thanks for the reply, i managed to start syslog-ng on port 514 using tcp, I'ved discovered that SELinux is causing the problem no to bind on tcp port, many thanks for the information.

CHEERS! =)