<span class="gmail_quote">2007/8/12, Jim Hendrick <<a href="mailto:jrhendri@maine.rr.com">jrhendri@maine.rr.com</a>>:</span><blockquote class="gmail_quote" style="margin-top: 0; margin-right: 0; margin-bottom: 0; margin-left: 0; margin-left: 0.80ex; border-left-color: #cccccc; border-left-width: 1px; border-left-style: solid; padding-left: 1ex">
Excuse me if you've already thought of this but, I assume your servers have<br>multiple NICs on separate networks. Why would the same server forward its<br>syslog messages to your central log server using different NICs? Wouldn't
<br>normal routing force it to connect using one NIC all the time?</blockquote><div><br>no, one reason why we use multiple network is that we have at least one network backup for servers.<br> </div><br><blockquote class="gmail_quote" style="margin-top: 0; margin-right: 0; margin-bottom: 0; margin-left: 0; margin-left: 0.80ex; border-left-color: #cccccc; border-left-width: 1px; border-left-style: solid; padding-left: 1ex">
i.e. is this really a problem? Have you seen the same server use different<br>NICs to talk to your log server?</blockquote><div><br>yes </div><br><blockquote class="gmail_quote" style="margin-top: 0; margin-right: 0; margin-bottom: 0; margin-left: 0; margin-left: 0.80ex; border-left-color: #cccccc; border-left-width: 1px; border-left-style: solid; padding-left: 1ex">
If you really are seeing this (and can't fix it at the source) I suppose you<br>could use a filter to look at the messages and define different destinations<br>for each server, using a regexp on the host to determine which to put where.
<br></blockquote><br>to difficult to maintain, we have often some servers who are added to the network,<br>i could write a shell script for auto-generate a config file but that seems ugly.<br> but apparently, there is only ugly solutions for what i want:
<br><br>i could either:<br>- put statically my servers in /etc/hosts<br>- put statically my servers in the syslog-ng.conf<br> - auto-create a syslog-ng.conf file each days through a crontab<br>- hack the syslog-ng source<br>
- pass by program(); and call a script for auto-generate symlink<br><br>as you can see, there is multiple solutions, i will choose one of them i think.<br><br>thanks all for your help.<br><br>--<br>Mobidyc