Well that makes sense! Well, I added your code onto the bottom of <a href="http://syslog-ng.conf.in">syslog-ng.conf.in</a> since I couldn't find a commented out line already in the config. Are there docs on referring statements to log statements like the one you gave me? I'm not exactly sure how to go about that. Thanks Sandor.
<br><br><div><span class="gmail_quote">On 8/28/07, <b class="gmail_sendername">Geller, Sandor (IT)</b> <<a href="mailto:Sandor.Geller@morganstanley.com">Sandor.Geller@morganstanley.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hello,<br><br>> Here is the section of the conf file I think you are referring to:<br>> #source my_src { .... };<br>> #<br>> source src {<br>> #<br>> # include internal syslog-ng messages<br>> # note: the internal() soure is required!
<br>> #<br>> internal();<br>><br>> #<br>> # the following line will be replaced by the<br>> # socket list generated by SuSEconfig using<br>> # variables from /etc/sysconfig/syslog:
<br>> #<br>> unix-dgram("/dev/log");<br>><br>> #<br>> # uncomment to process log messages from network:<br>> #<br>> udp(ip("192.168.x.x") port(514));<br>> };
<br><br>This is the source, not the destination declaration. You can<br>use only IP addresses bound to the box itself, not remote ones.<br><br>What you want to achieve is defining a remote destination like:<br><br>destination d_remotehost {
<br> udp("192.168.x.x" port(514));<br>};<br><br>And then refer to this destination in your log statements.<br><br>Regards,<br><br>Sandor<br>--------------------------------------------------------<br><br>
NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.<br>_______________________________________________
<br>syslog-ng maillist - <a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a><br><a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
<br>Frequently asked questions at <a href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a><br><br></blockquote></div><br><br clear="all"><br>-- <br>Chris Harner [] Server Engineer [] Arnold Transportation Services