0

I keep getting this error from cron every night. I can't figure out what syslog-ng is looking for. I've installed syslog-ng-mod-json module through apt, however the problem persists whenever syslog-ng is restarted. Anyone know the fix for this?

/etc/cron.daily/logrotate:
Plugin module not found in 'module-path'; module-path='/usr/lib/syslog-ng/3.5.3', module='tfjson'
Server Fault
  • 3,714
  • 12
  • 54
  • 89
  • Hi, logrotate sends a HUP signal to syslog-ng, and causes it to reload its configuration. This is normal. The problem is that syslog-ng cannot find the json module for some reason. Check the available modules (execute the syslog-ng --version command), and find which is json-related, then include the following line in your syslog-ng config: @module I kinda remember that the tfson module was renamed to json-plugin, but I'm not sure in which version. – Robert Fekete Sep 29 '16 at 06:58
  • Thanks. I found the borked module reference in `vi /etc/syslog-ng/conf.d/00load-tfjson.conf`. Changed it to `@module json-plugin` and all is well. – Server Fault Oct 11 '16 at 19:25
  • I'm glad that it worked! – Robert Fekete Oct 13 '16 at 06:25
  • if you re-post as an answer, I'll accept it. This has been driving me batty for a couple months. You should get the SF bling for it. – Server Fault Oct 14 '16 at 21:31

1 Answers1

1

logrotate sends a HUP signal to syslog-ng, and causes it to reload its configuration. This is normal. The problem is that syslog-ng cannot find the json module for some reason. Check the available modules (execute the syslog-ng --version command), and find which is json-related, then include the following line in your syslog-ng config: @module I kinda remember that the tfson module was renamed to json-plugin, but I'm not sure in which version.

Robert Fekete
  • 552
  • 1
  • 3
  • 6