<div>Server<BR>-----------------------------<BR>[root@plggd020 etc]# more syslog-ng.conf<BR>#sample syslog-ng.conf for a central logging server<BR>options {</div> <div> sync (0);<BR> log_fifo_size (2048);<BR> create_dirs (yes);<BR> group (root);<BR> dir_group (root);<BR> perm (0640);<BR> dir_perm (0750);<BR> };</div> <div>source s_local { internal(); unix-stream("/dev/log"); file("/proc/kmsg" log_prefix("kernel: ")); };<BR>destination d_auth { file("/var/log/auth.log"); };<BR>filter f_auth { facility(auth, authpriv); };</div> <div>source s_remote { tcp(); };<BR>destination d_clients { file("/var/log/HOSTS/$HOST"); };</div> <div>log { source(s_remote); destination(d_clients); };<BR>log { source(s_local); filter(f_auth); destination(d_auth); };</div> <div><BR>Client<BR>-----------------</div> <div>-bash-3.00# more
syslog-ng.conf<BR>#sample syslog-ng.conf for a remote client<BR>source s_local { internal(); unix-stream("/dev/log"); file("/proc/kmsg" log_prefix("kernel: ")); };</div> <div>destination d_loghost {tcp("20.5.68.82" port(514));};<BR>log { source(s_local); destination(d_loghost); };</div> <div>destination messages { file("/var/log/messages-ng"); };<BR>log {<BR> source(s_local);<BR> destination(messages);<BR>};</div> <div>-bash-3.00#</div> <div>And there is no message going to Server <BR>However at Client side log files shows the message as below:</div> <div>-bash-3.00# logger "test "<BR>-bash-3.00# tail /var/log/messages-ng<BR>Apr 23 08:44:38 <A href="mailto:s_local@zlggd052">s_local@zlggd052</A> syslog-ng[9935]: syslog-ng starting up; version='2.0.2'<BR>Apr 23 08:44:38 <A href="mailto:s_local@zlggd052">s_local@zlggd052</A> syslog-ng[9935]: Connection failed; error='No route to host
(113)', time_reopen='60'<BR>Apr 23 08:45:12 <A href="mailto:s_local@zlggd052">s_local@zlggd052</A> syslog-ng[9935]: SIGTERM received, terminating;<BR>Apr 23 08:45:12 <A href="mailto:s_local@zlggd052">s_local@zlggd052</A> syslog-ng[9935]: syslog-ng shutting down; version='2.0.2'<BR>Apr 23 08:45:13 <A href="mailto:s_local@zlggd052">s_local@zlggd052</A> syslog-ng[9945]: syslog-ng starting up; version='2.0.2'<BR>Apr 23 08:45:13 <A href="mailto:s_local@zlggd052">s_local@zlggd052</A> syslog-ng[9945]: Connection failed; error='No route to host (113)', time_reopen='60'<BR>Apr 23 08:45:18 <A href="mailto:s_local@zlggd052">s_local@zlggd052</A> soetest1: test<BR>Apr 23 08:46:13 <A href="mailto:s_local@zlggd052">s_local@zlggd052</A> syslog-ng[9945]: Connection failed; error='No route to host (113)', time_reopen='60'<BR>Apr 23 08:47:13 <A href="mailto:s_local@zlggd052">s_local@zlggd052</A> syslog-ng[9945]: Connection failed; error='No route to host (113)', time_reopen='60'<BR>Apr 23
08:47:46 <A href="mailto:s_local@zlggd052">s_local@zlggd052</A> soetest1: test<BR>-bash-3.00#</div> <div> </div> <div> </div> <div>Please suggest what will be the reason.</div> <div> </div> <div>Thanks & Regards</div> <div> </div> <div><BR>Shamim</div> <div> </div><p> 
<hr size=1>
Yahoo! Answers - Got a question? Someone out there knows the answer. <a
href="http://uk.answers.yahoo.com/;_ylc=X3oDMTEydmViNG02BF9TAzIxMTQ3MTcxOTAEc2VjA21haWwEc2xrA3RhZ2xpbmU">Try
it now</a>.