syslog-ng-3.1* doesn't write log files in directories not owned by root. I'm not sure if the 3.0 series is affected as well but its almost EOL anyway. Jun 7 23:10:44 odin syslog-ng[9765]: Error opening file for writing; filename='/var/log/puppet/puppet-agent.log', error='Permission denied (13)' Steps to reproduce: source src { unix-stream("/dev/log" max-connections(256)); internal(); } destination puppet_agent { file("/var/log/puppet/puppet-agent.log" owner("puppet") group("puppet")); }; filter f_puppet_agent { program("puppet-agent"); }; log { source(src); filter(f_puppet_agent); destination(puppet_agent); }; mkdir -m 0755 /var/log/puppet; chown puppet:puppet /var/log/puppet /etc/init.d/syslog-ng reload /etc/init.d/puppet restart You'll see a error like above. This has been fixed in syslog-ng 3.2*. That should be the correct upstream bug: https://bugzilla.balabit.com/show_bug.cgi?id=52 Can we please stabilize any of the 3.2 series?
(In reply to comment #0) > Can we please stabilize any of the 3.2 series? bug 370845
3.1 is old. closing.