syslog-ng with "template" option

ksri07091983 · 08-29-2008, 06:26 AM

hi all,

I am trying to log certain types of messages(like errors and warnings) through syslog-ng. I am using SLES 10 SP1 and syslog-ng version 1.6.8.

In the configuration file /etc/syslog-ng/syslog-ng.conf.in entered the following lines to format the log message:

Code:

template t_demo { template("$ISODATE $HOST $MSG\n"); template_escape(no); };

After this i run the commands "/sbin/SuSEconfig --module syslog-ng;rcsyslog restart

the first command succeeds where as the second command (syslog restart) fails saying

Code:

Starting syslog servicessyntax error at 165
Parse error reading configuration file, exiting. (line 165)
startproc:  exit status of parent of /sbin/syslog-ng: 1
                                                                      failed

. If i remove the template definition, then it syslog service is starting properly.

It would be great if somebody help me out of this.

Thanks in advance,

Sridhar

acid_kewpie · 08-30-2008, 03:11 AM

templates aren't defined as objects like destinations, filters and sources. e.g....

Code:

 destination df_local1 {
         file("/mnt/log/$R_YEAR-$R_MONTH-$R_DAY/$SOURCEIP/local.log"
         template("$FULLDATE <> $PROGRAM <> $MSGONLY\n")
         template_escape(no));
 };

ksri07091983 · 09-01-2008, 01:23 AM

Hi Chris,

Thanks a million. That worked !!. Great Help.

I read in the syslog documentation (syslog-ng-v2.0-guide-admin-en.pdf)like this :

Code:

template t_demo_filetemplate {
template("$ISODATE $HOST $MSG\n"); template_escape(no); };
destination d_file {
file("/var/log/messages" template(t_demo_filetemplate)); };

i hope this applies for syslog version 2.0. Since i was using a syslog version lesser than 2.0 this might not have worked, i believe.

Thanks once again Chris,

have a great day !!

Sridhar

acid_kewpie · 09-02-2008, 03:14 AM

2.0 and 1.6 are pretty different, I'm not sure of the details but i know the config files are highly incompatible.