Rudder

For posterity :

On Debian Lenny,

After agent modification of the syslog-ng file, syslog-ng can't restart.

syslog-ng is not running, because the config file is broken : Starting system logging: syslog-ngError in configuration, unresolved source reference; source='s_src'

Here is the faulty config line :

filter f_local_rudder{facility(local6) and program("rudder.*|cf-agent.*");};destination rudder_loghost {udp("192.168.20.20" port (514));};log 
             {source(s_src);filter(f_local_rudder);destination(rudder_loghost);flags(final);};

Changing the s_src to s_all does not work because the rudder agent repairs it on the next run. The solution in this case was to duplicate the s_all source declaration to a s_src bloc.