Nagios Support Forum

Code: Select all

@include "scl.conf"
source s_nagios {
	system();
	internal();
};

destination d_nagios { 
    tcp("192.168.242.147" port(5544)); 
};

log { 
	source(s_nagios); 
	destination(d_nagios); 
};

Code: Select all

[root@localhost ~]# service syslog-ng restart
Stopping syslog-ng:                                        [FAILED]
Starting syslog-ng: Connection failed; fd='12', server='AF_INET(192.168.242.147:5544)', local='AF_INET(0.0.0.0:0)', error='Permission denied (13)'
Initiating connection failed, reconnecting; time_reopen='10'
                                                           [  OK  ]

[root@localhost ~]# service syslog-ng status
syslog-ng (pid  2853) is running...

Code: Select all

Starting Nmap 5.51 ( http://nmap.org ) at 2016-11-29 14:50 CST
Nmap scan report for 192.168.242.147
Host is up (0.00029s latency).
Not shown: 996 filtered ports
PORT     STATE  SERVICE
22/tcp   open   ssh
80/tcp   open   http
443/tcp  closed https
5544/tcp open   unknown
MAC Address: 00:0C:29:1D:7E:DB (VMware)

Code: Select all

cd /root
mkdir selinux
cd selinux
man audit2allow
#you always want to look at the man page an understand the options before running any command
audit2allow -M syslog-ng-modified -l -i /var/log/audit/audit.log
ls
#syslog-ng-modified.pp and syslog-ng-modified.te show up in the directory
vim syslog-ng-modified.te
semodule -i syslog-ng-modified.pp

# to find the file
updatedb
locate syslog-ng-modified.pp