You are not logged in.

#1 2014-12-08 21:01:08

A.J.Rouvoet
Member
From: Naaldwijk, The Netherlands
Registered: 2012-06-30
Posts: 37
Website

syslog-ng not logging anythin

I took the base/arch image and installed syslog-ng in it
Running something like

# syslog-ng &
# logger -p auth.error "test msg"

does not show up anywhere in /var/log. The only message I can find from syslog is the message that it started in "everything.log" and "syslog.log" under /var/log.

I'm using the default configuration, which has sources and destination set-up for auth.

Any help is appreciated!

Offline

#2 2014-12-08 21:43:48

karol
Archivist
Registered: 2009-05-06
Posts: 25,440

Re: syslog-ng not logging anythin

What about systemd journal?

Offline

#3 2014-12-08 21:47:24

A.J.Rouvoet
Member
From: Naaldwijk, The Netherlands
Registered: 2012-06-30
Posts: 37
Website

Re: syslog-ng not logging anythin

karol wrote:

What about systemd journal?

Systemd does not run inside arch/base. And as such, the journal is empty.

Offline

#4 2014-12-08 21:50:15

karol
Archivist
Registered: 2009-05-06
Posts: 25,440

Re: syslog-ng not logging anythin

Just to make sure, are you talking about https://registry.hub.docker.com/u/base/arch/ ?
I see there's also https://registry.hub.docker.com/u/base/archlinux/

Offline

#5 2014-12-08 21:52:28

A.J.Rouvoet
Member
From: Naaldwijk, The Netherlands
Registered: 2012-06-30
Posts: 37
Website

Re: syslog-ng not logging anythin

karol wrote:

Just to make sure, are you talking about https://registry.hub.docker.com/u/base/arch/ ?
I see there's also https://registry.hub.docker.com/u/base/archlinux/

The former.

Offline

#6 2014-12-09 11:33:53

Lone_Wolf
Forum Moderator
From: Netherlands, Europe
Registered: 2005-10-04
Posts: 11,961

Re: syslog-ng not logging anythin

A.J.Rouvoet,

I encountered a bug in syslog-ng 3.6.1 [1] that may be the cause of your problem also.

If built with enable-systemd, it will always use systemd as log source, regardless of whether systemd is actually running.

The bug was solved in 3.6/master branch [2] .

[1] https://bbs.archlinux.org/viewtopic.php … 3#p1481453
[2] https://github.com/balabit/syslog-ng/co … 603cb9f1ca

Added
I felt i should add some clarification

Arch syslog-ng default config is to use the system() source .
Because of the bug syslog-ng only accepts systemd as source for logging .
If systemd is not running in your docker install, then syslog-ng will get nothing.

Last edited by Lone_Wolf (2014-12-09 11:42:10)


Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.


(A works at time B)  && (time C > time B ) ≠  (A works at time C)

Offline

#7 2014-12-16 18:59:10

A.J.Rouvoet
Member
From: Naaldwijk, The Netherlands
Registered: 2012-06-30
Posts: 37
Website

Re: syslog-ng not logging anythin

Thanks Lone Wolf for your explanation! That should solve it.

For my particular case I found a better solution actually. I want the logs on the host anyway, so I'll mount the host's /dev/log on the container's /dev/log to accomplish this.

Closing

Offline

Board footer

Powered by FluxBB