[Syslog-ng-maintainers] Bug#729991: syslog-ng-core uninstallable

Gergely Nagy algernon at balabit.hu
Wed Nov 20 14:57:38 GMT 2013


Andrei POPESCU <andreimpopescu at gmail.com> writes:

> On Mi, 20 nov 13, 00:19:49, Martin Bagge / brother wrote:
[...]

>> [....] Starting system logging: syslog-ngUnable to determine how to
>> monitor this file, follow_freq() unset and it is not possible to poll
>> it with the current ivykis polling method. Set follow-freq() for
>> regular files or change IV_EXCLUDE_POLL_METHOD environment variable to
>> override the automatically selected polling method;
>> filename='/dev/kmsg', fd='9'
>> Error initializing message pipeline;
>>  failed!
>> invoke-rc.d: initscript syslog-ng, action "start" failed.

The file() thing here comes from the system() source. system() is
expanded at run-time, depending on the OS/platform/whatever syslog-ng is
running on.

You can run "syslog-ng --preprocess-into=/dev/stdout -s" to see what it
does with the config file. You'll find the file("/dev/kmsg") thing
there.

Can you tell me the kernel version you have? And does this happen in a
container, VM, or on bare metal?

As a quick workaround, you can remove the system() line from the config,
and replacing it with whatever it expands to (see the command above),
without the /dev/kmsg part.

-- 
|8]




More information about the Syslog-ng-maintainers mailing list