Hi all,<br><br>logmessages are being written to the AIX default syslog daemon which forwards certain messages to syslog ng via a named pipe "/var/adm/syslog.pipe"<br><br>The log messages are being written to the destination "localfile" but not to the remote syslog ng logging server. Any idea what's going wrong here ?
<br>the exact same "syslog-ng.conf" works with a HP-UX or Solaris based Syslog NG Installation without any problem.<br><br><br>Setup:<br><br>Syslog NG: 1.6.9 with libol 0.3.17 <br>System: AIX 5.1 ML8 and AIX 5.3
ML 3<br><br>central logging server is a linux based syslog NG 1.6.9 which can successfully receive log messages from other (non aix) hosts.<br><br>syslog-ng.conf:<br><br>##############<br># Log sources<br>#<br>source src {
<br>pipe ("/var/adm/syslog.pipe");<br>};<br><br>##############<br># filters<br>#<br>filter f_sshd {program("sshd"); };<br><br>##############<br># Log destinations<br>destination mylogserver{ tcp("logserver" port(514)); };
<br>destination localfile{ file("/var/tmp/messages" template("$YEAR.$MONTH.$DAY $HOUR:$MIN:$SEC $HOST $MSG\n") template-escape(yes<br>)); };<br><br>##############<br># Perform the logging<br>log { source(src); filter(f_sshd); destination(mylogserver); };
<br><br>log { source(src); filter(f_sshd); destination(localfile); };<br><br><br>regards<br>Jochen<br><br>