<html><body><span style="font-family:Verdana; color:#000000; font-size:10pt;"><div>On Solaris Sparc v.10. I killed the syslog (deleted the syslog.conf file) and replaced it with syslogng 3.0.2. the aim is to have syslog-ng handle the local & remote logs.<br><br><br>in the mean time, for test , I have a very simple syslogng configuration file :<br>==<br>@version:3.0 <br><br>source local { unix-stream("/dev/log"); internal(); }; <br><br>destination all { file("/var/log/messages"); }; <br><br>log { source(local); destination(all); }; <br>==<br>The syslog-ng starts up as indicated below in the messages file:, <br><br>Sep 22 10:13:49 scss0004 syslog-ng[1550]: syslog-ng starting up; version='3.0.2' <br>Sep 22 10:13:49 scss0004 syslog-ng[1550]: Initializing destination file writer; template='/var/log/messages', filename='/var/log/messages'<br><br>-- MARK -- <br>=<br>Netstat below: <br>netstat -a | grep syslog <br> *.syslog Idle <br>30006f653a0 stream-ord 30007183680 00000000 /usr/local/var/syslog-ng.ctl <br>=<br><br>I had to manually create the usr/local/var/syslog-ng.ctl before it worked. <br><br>However, I am not getting anything in my logs, even after running logger –p . <br><br>I would like know if for sure that the syslog-ng Daemon is not confused with the old syslog Daemon, & klogd, or perhaps messages are just being discarded.<br><br>Running truss shows that the sockets does indeed get created <br><br>Any idea why I all I see in the messages file is -- MARK -- </div><div><br></div><div>thanks<br></div></span></body></html>