On Fri, 13 Mar 2015 21:51:06 +0100
Sven Joachim <svenj...@gmx.de> wrote:
> On 2015-03-13 21:12 +0100, Stephen R Guglielmo wrote:
> 
> > I have Postfix and Dovecot running on my Debian Jessie/testing
> > system. When I first setup the system a few months ago, I know that
> > Postfix and Dovecot were both logging to /var/log/mail.log through
> > syslog because I was using it to diagnose issues. I can also view
> > entries in the old rotated files (/var/log/mail.log.4.gz).
> >
> > It seems that they are not logging [there] anymore. My Postfix
> > configuration has no options set regarding logs, which leaves
> > everything at default (using the mail facility of syslog). Dovecot
> > is also set to log to the mail facility of syslog.
> 
> Is your syslog daemon actually running?
> 
> > I have not installed any type of non-default syslog, nor have I
> > touched the syslog config or any log rotation daemon's config.
> 
> So I assume you use rsyslog.  What does "service rsyslog status" say?

It seems this system has syslog-ng. This is a month-old Jessie install
on a laptop.
$ ps aux | grep syslog
root       252  0.0  0.3  77928  3404 ?        Ss   Feb20
0:07 /usr/sbin/syslog-ng -F


$ sudo systemctl status syslog-ng
syslog-ng.service - System Logger
Daemon Loaded: loaded (/lib/systemd/system/syslog-ng.service; enabled)
   Active: active (running) since Fri 2015-02-20 21:42:58 EST; 2 weeks
6 days ago
   Docs: man:syslog-ng(8) Main PID: 252 (syslog-ng)
   Status: "Error parsing new configuration, using the old config (Fri
Mar 13 01:42:05 2015"
   CGroup: /system.slice/syslog-ng.service
   └─252 /usr/sbin/syslog-ng -F


I read that error in the status, which lead me to:

$ sudo syslog-ng --syntax-only
syslog-ng: Error setting capabilities, capability management disabled;
error='Operation not permitted'

I looked through the [several] configuration files (/etc/syslog-ng/)
for the string "capabilities", but didn't find anything.

These software systems are getting more and more complex. I've been
using linux and bsd for many years and it seems that I don't even know
where to look to solve problems anymore with all these new systems
with linux.

Maybe it would be better if I installed a plain old simple syslog
daemon. Is there an alternative one to syslog-ng?

Attachment: pgpS3M3k7boiu.pgp
Description: OpenPGP digital signature

Reply via email to