error:
linux-hzti:/etc/syslog-ng # service syslog restart
Shutting down syslog services done
Re-Starting syslog servicesWarning: Unknown facility message
io.c: bind_inet_socket() bind failed 192.168.0.1:514 Cannot assign requested address
Error initializing configuration, exiting.
startproc: exit status of parent of /sbin/syslog-ng: 1
failed
syslog-ng configuration:
/etc/syslog-ng/syslog-ng.conf: syslog configuration
options {
use_dns(yes);
dns_cache(yes);
use_fqdn(no);
stats(3600);
chain_hostnames(no);
time_reopen(10);
};
source s_local {
internal();
unix-stream("/dev/log" max-connections(100));
file("/proc/kmsg" log_prefix("kernel: "));
};
source s_external {
udp(ip(192.168.0.1));
};
filter f_kernel {
facility(kern);
};
filter f_auth {
facility(auth, authpriv);
};
destination d_kernel {
file("/var/log/$HOST/kernel" create_dirs(yes));
};
destination d_auth {
file("/var/log/$HOST/auth" create_dirs(yes));
};
destination d_messages {
file("/var/log/$HOST/messages" create_dirs(yes));
};
destination d_external {
udp(“192.168.0.2”);
};
log {
source(s_local);
destination(d_external);
};
log {
source(s_local);
source(s_external);
filter(f_kernel);
destination(d_kernel);
};
log {
source(s_local);
source(s_external);
filter(f_auth);
destination(d_auth);
};
SC-1
filter f_SC-1_messages {
host(^SC-1$) and not facility(auth, authpriv) and not match(“RPM_Install”) and not match(“RPM_Uninstall”);
};
log {
source(s_local);
source(s_external);
filter(f_SC-1_messages);
destination(d_messages);
};
SC-2
filter f_SC-2_messages {
host(^SC-2$) and not facility(auth, authpriv);
};
log {
source(s_local);
source(s_external);
filter(f_SC-2_messages);
destination(d_messages);
};
PL-3
filter f_PL-3_messages {
host(^PL-3$) and not facility(auth, authpriv);
};
log {
source(s_local);
source(s_external);
filter(f_PL-3_messages);
destination(d_messages);
};
PL-4
filter f_PL-4_messages {
host(^PL-4$) and not facility(auth, authpriv);
};
log {
source(s_local);
source(s_external);
filter(f_PL-4_messages);
destination(d_messages);
};
PL-5
filter f_PL-5_messages {
host(^PL-5$) and not facility(auth, authpriv);
};
log {
source(s_local);
source(s_external);
filter(f_PL-5_messages);
destination(d_messages);
};
PL-6
filter f_PL-6_messages {
host(^PL-6$) and not facility(auth, authpriv);
};
log {
source(s_local);
source(s_external);
filter(f_PL-6_messages);
destination(d_messages);
};
#Added by MA Installation
destination d_rpminstallation {
file("/home/dveinstaller/logs/SC-1-install-rpm.log" create_dirs(yes));
};
destination d_rpmuninstallation {
file("/home/dveinstaller/logs/SC-1-uninstall-rpm.log" create_dirs(yes));
};
filter f_rpminstallation {
match(“RPM_Install”);
};
filter f_rpmuninstallation {
match(“RPM_Uninstall”);
};
log {
source(s_local);
filter(f_rpminstallation);
destination(d_rpminstallation);
};
log {
source(s_local);
filter(f_rpmuninstallation);
destination(d_rpmuninstallation);
};
destination d_cron {
file("/var/log/SC-1/cron" create_dirs(yes));
};
filter f_cron_SC-1 {
host(SC-1) and facility(cron);
};
log {
source(s_local);
filter(f_cron_SC-1);
destination(d_cron);
};
filter f_auth_1 { level(info) and facility(auth); };
destination d_auth_1 { udp(“10.213.47.24” port(514));};
log { source(src); filter(f_auth_1); destination(d_auth_1);};
filter f_messages { level(err) and facility(message); };
destination d_message { file("/var/log/msglog" ); };
log { source(src); filter(f_messages); destination(d_message); };