<div dir="ltr"><div>now when i use the TCP CONNECTION I CAN RECIVE NOTHING</div>
<div>******************syslog server**************** syslog 2.0.9</div>
<div>source my_tcp {</div>
<div>tcp(ip(0.0.0.0) port (415)); // they saied 0.0.0.0 means recive from any ip adress i also tried tcp ( port(514));<br>same thing};</div>
<div>destination my_dest{ file("/var/log/Sami/$HOST/messages" owner("root") group("root") perm(0640) dir_perm(0750) create_dirs(yes));<br> };</div>
<div>log { source(my_tcp); #filter(my_filter); <br>destination(my_dest); };</div>
<div>************************************************************</div>
<div> </div>
<div>******************syslog client***************2syslog 2.0.10 </div>
<div> </div>
<div>source my_src { file("/var/log/apache2/error_log" follow_freq(1) ); };</div>
<div>#filter my_filter { };</div>
<div>destination my_dest{ tcp("192.168.1.64) port(514); };</div>
<div>log { source(my_src); #filter(my_filter); <br>destination(my_dest); };</div>
<div>**********************************************************************************</div>
<div> </div>
<div>where is the problem</div>
<div>help me plz</div>
<div>it was working on one machine but when i send to he syslog server i have nothing<br></div>
<div class="gmail_quote">2009/3/12 Balazs Scheidler <span dir="ltr"><<a href="mailto:bazsi@balabit.hu">bazsi@balabit.hu</a>></span><br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<div class="im">On Thu, 2009-03-12 at 06:55 +0100, gatfi sami wrote:<br>> thank you<br>> another thing please<br>> i would like to ask you if it is possible to change the TAG of sent<br>> message<br>> for example<br>
> give the messages sent to a syslog server tag a value ( 0X11)<br>> and then in the server filter on this tag<br>> i am killing myself to tell my techer that the tag and priority flag<br>> are assigned automaticly by syslog and he insistes on the fact that we<br>
> can change their value<br><br></div>it is not currently possible. you can rewrite all text based fields<br>(host, program, msg) but you can't do it with non-text fields like the<br>tag.<br><br>There was a related mail the other day, read the mailing list archives.<br>
<font color="#888888"><br>--<br></font>
<div>
<div></div>
<div class="h5">Bazsi<br><br>______________________________________________________________________________<br>Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>FAQ: <a href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br>
<br></div></div></blockquote></div><br></div>