Hello, i've installed syslog-ng today since i've read the admionistrator guide on the editor website and i've releved the following errors: in the default /etc/syslog-ng/syslog-ng.conf file there are these two lines: log { source(src); destination(messages); }; log { source(src); destination(console_all); }; but at the url http://www.balabit.com/dl/html/syslog-ng-admin-guide_en.html/ch03s03.html you can see: Define a source only once. The same source can be used in several log paths. Duplicating sources causes syslog-ng to open the source (TCP/IP port, file, etc.) more than once, which might cause problems. For example, include the /dev/log file source only in one source statement, and use this statement in more than one log path if needed. another error, always in the default /etc/syslog-ng/syslog-ng.conf file, you have: source src { unix-stream("/dev/log" max-connections(256)); internal(); pipe("/proc/kmsg"); }; kmsg must not be a pipe as you can see at: http://www.balabit.com/dl/html/syslog-ng-admin-guide_en.html/ch06s04.html at this url there si a warning who contains: Do not use a pipe source to read /proc/kmsg. the source would be: file("/proc/kmsg"); thanks to correct these if i'm right. Regards.
well, pipe() obviously works since it's been that way for years but file() is more correct so I've made that change. The src source is only defined once in the config. You can use it as many times as you like. Thanks for the bug report.
