Originally posted by: SystemAdmin

I've had syslog-ng installed and running (accepting network messages at least) but in my bumping around I've done something terrible wrong and its not even starting anymore:

/usr/local/sbin/syslog-ng -f /etc/syslog-ng/syslog-ng.conf -u syslog -g sys>
Error binding socket; addr='AF_UNIX(/dev/log)', error='Address already in use (67)'
Error initializing source driver; source='s_sys'
The syslog-ng.conf file has: source s_sys { unix-dgram("/dev/log"); internal(); };
Now, what I'd like to wind up with is syslog-ng receiving all of the messages from the network AND the local AIX system (and probably, in the near future, other AIX messages via the network). Has anyone replaced the syslogd that comes with AIX? Can you provide the steps involved? I think the current issue I'm dealing with is my own fault, trying to get the system and/or some app to log to /dev/log so that syslog-ng would pick it up. 'Course, now I can't do anything.

Truly stuck - any help would be appreciated.

Originally posted by: SystemAdmin

sounds to me like you are still running the syslog that comes with aix. since this process has opened a socket named /dev/log, your syslog-ng process is not able to do so as well. check with lssrc -s syslogd and stop the service if it is running.

hth
Joachim Gann

Originally posted by: SystemAdmin

Nope - "inoperative".

What are the steps for replacing the builtin syslogd anyway? I'm trying to wing it.

I've been as yet unable to find even a way to start syslog-ng as the native syslog daemon was. I had thought the replacement of syslogd was a popular thing to do, but if it is, those doing it are tight lipped! :)