Hi<br><br>2 sec of googling with "sample syslog-ng conf" and found<br><a href="http://www.campin.net/syslog-ng.conf">http://www.campin.net/syslog-ng.conf</a><br><br>It uses a lot of useless conf, but for what i understood, you have to use the following destination structure :<br>
<br># set it up<br>destination std { <br> file("/var/log/HOSTS/$HOST/$YEAR/$MONTH/$DAY/$FACILITY_$HOST_$YEAR_$MONTH_$DAY" <br> owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(yes)<br> ); <br>
};<br><br>For the source & option structure, i'm sure you'll find some usefull ones in this page.<br><br>:)<br><br>bye<br><br><br><div class="gmail_quote">2009/11/3 Christopher Barry <span dir="ltr"><<a href="mailto:christopher.barry@rackwareinc.com">christopher.barry@rackwareinc.com</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi All,<br>
<br>
Looking for good config example that:<br>
sets up syslog-ng as the central log server catching standard remote<br>
syslog hosts logs, placing them in hostname dirs, with all of the<br>
remotes hosts logfiles intact in the hostname dirs. Creating 'date' dirs<br>
above the hostname dirs would be sweet too.<br>
<br>
I've been googling around, but can't really find what I'm after. Did see<br>
this, which is essentially what I want, but it seemed to be left<br>
unanswered.<br>
<a href="http://www.syslog.org/forum/syslog-ng/individual-files/" target="_blank">http://www.syslog.org/forum/syslog-ng/individual-files/</a><br>
<br>
<br>
Thanks for any pointers to docs/samples you can give me.<br>
<br>
<br>
Cheers,<br>
-C<br>
<br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br>
<br>
</blockquote></div><br>