I'm guessing you are hand editing your syslog-ng file?
If so, you need to define the source called "src". You'll need a section in /etc/syslog-ng/syslog-ng.conf that looks like:
Code:
source src {
#
# include internal syslog-ng messages
# note: the internal() soure is required!
#
internal();
#
# the following line will be replaced by the
# socket list generated by SuSEconfig using
# variables from /etc/sysconfig/syslog:
#
unix-dgram("/dev/log");
unix-dgram("/var/lib/named/dev/log");
#
# uncomment to process log messages from network:
#
udp(ip("0.0.0.0") port(514));
};
Hope that helps,
Mark
P.S. There are several open bugs in bugzilla relating to the various syslog engines, and in those bugs are examples of working syslog-ng.conf files.
__________________
___________________________________
L. Mark Stone, CIO
"Uptime. All the time."
477 Congress Street | Portland, ME 04101-3431 | (207) 772-5678
proactive maintenance and monitoring | technology consulting
Zimbra groupware | EMR implementations | private cloud hosting