syslog-ng 已停止并且不想启动

syslog-ng 已停止并且不想启动

我最近注意到我的系统日志是空的。

我尝试重新启动它但出现此错误:

$ /etc/init.d/syslog-ng reload
Reload system logging: syslog-ngsyntax error in /etc/syslog-ng/syslog-ng.conf at line 99.

syslog-ng documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
mailing list: https://lists.balabit.hu/mailman/listinfo/syslog-ng
 failed!

这是 syslog-ng.conf 的一部分

9. filter f_auth { facility(auth, authpriv) and not filter(f_debug); };
94. filter f_cron { facility(cron) and not filter(f_debug); };
95. filter f_daemon { facility(daemon) and not filter(f_debug); };
96. filter f_kern { facility(kern) and not filter(f_debug); };
97. filter f_lpr { facility(lpr) and not filter(f_debug); };
98. filter f_local { facility(local0, local1, local3, local4, local5,
99.                         local6, local7) and not filter(f_debug); };
100. filter f_mail { facility(mail) and not filter(f_debug); };
101. filter f_news { facility(news) and not filter(f_debug); };
102. filter f_syslog3 { not facility(auth, authpriv, mail) and not filter(f_debug); };
103. filter f_user { facility(user) and not filter(f_debug); };
104. filter f_uucp { facility(uucp) and not filter(f_debug); };

您知道可能出了什么问题吗?操作系统是 Debian Squeeze。

答案1

您必须将第 98 行和第 99 行放在一行中:

过滤器 f_local { facility(local0, local1, local3, local4, local5, local6, local7) 而不是过滤器(f_debug); };

如果需要两行,请\在第一行末尾使用:

过滤器 f_local { 设施(local0,local1,local3,local4,local5,\

local6, local7) 而不是 filter(f_debug); };

相关内容