我想将日志记录从rsyslog
切换到syslog-ng
,但是配置并启动后,它无法启动。
这是我收到的日志文件,但我找不到任何错误的线索:
rrr-hp:~# systemctl status syslog-ng.service
● syslog-ng.service - System Logger Daemon
Loaded: loaded (/lib/systemd/system/syslog-ng.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Mon 2021-03-22 12:51:35 CET; 4min 52s ago
Docs: man:syslog-ng(8)
Process: 448232 ExecStart=/usr/sbin/syslog-ng -F $SYSLOGNG_OPTS (code=exited, status=1/FAILURE)
Main PID: 448232 (code=exited, status=1/FAILURE)
Status: "Starting up... (Mon Mar 22 12:51:35 2021"
Mar 22 12:51:35 rrr-hp systemd[1]: syslog-ng.service: Scheduled restart job, restart counter is at 5.
Mar 22 12:51:35 rrr-hp systemd[1]: Stopped System Logger Daemon.
Mar 22 12:51:35 rrr-hp systemd[1]: syslog-ng.service: Start request repeated too quickly.
Mar 22 12:51:35 rrr-hp systemd[1]: syslog-ng.service: Failed with result 'exit-code'.
Mar 22 12:51:35 rrr-hp systemd[1]: Failed to start System Logger Daemon.
rrr-hp:~#
还有journalctl -xe
输出,但对我来说并不清楚:
rrr-hp:~# journalctl -xe
Mar 22 12:41:37 rrr-hp syslog-ng[447444]: contact: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Mar 22 12:41:37 rrr-hp systemd[1]: syslog-ng.service: Main process exited, code=exited, status=1/FAILURE
░░ Subject: Unit process exited
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ An ExecStart= process belonging to unit syslog-ng.service has exited.
░░
░░ The process' exit code is 'exited' and its exit status is 1.
Mar 22 12:41:37 rrr-hp systemd[1]: syslog-ng.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ The unit syslog-ng.service has entered the 'failed' state with result 'exit-code'.
Mar 22 12:41:37 rrr-hp systemd[1]: Failed to start System Logger Daemon.
░░ Subject: A start job for unit syslog-ng.service has failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit syslog-ng.service has finished with a failure.
░░
░░ The job identifier is 7765 and the job result is failed.
Mar 22 12:41:38 rrr-hp systemd[1]: syslog-ng.service: Scheduled restart job, restart counter is at 5.
░░ Subject: Automatic restarting of a unit has been scheduled
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ Automatic restarting of the unit syslog-ng.service has been scheduled, as the result for
░░ the configured Restart= setting for the unit.
Mar 22 12:41:38 rrr-hp systemd[1]: Stopped System Logger Daemon.
░░ Subject: A stop job for unit syslog-ng.service has finished
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A stop job for unit syslog-ng.service has finished.
░░
░░ The job identifier is 7865 and the job result is done.
Mar 22 12:41:38 rrr-hp systemd[1]: syslog-ng.service: Start request repeated too quickly.
Mar 22 12:41:38 rrr-hp systemd[1]: syslog-ng.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ The unit syslog-ng.service has entered the 'failed' state with result 'exit-code'.
Mar 22 12:41:38 rrr-hp systemd[1]: Failed to start System Logger Daemon.
░░ Subject: A start job for unit syslog-ng.service has failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit syslog-ng.service has finished with a failure.
░░
░░ The job identifier is 7865 and the job result is failed.
rrr-hp:~#
我一直尝试在以下基础上在unix-dgram
/ unix-socket
/之间切换:unix-stream
syslog-ng 服务未随 systemd 启动,但命令工作正常但他们都没有工作。
我的Linux版本是:
rrr-hp:~# cat /etc/debian_version
kali-rolling
rrr-hp:~#
有人能给我提示吗,可能出了什么问题,或者在哪里寻找更多线索?