<div dir="ltr"><div>i was able to run the second instance with all three parameters but I am more confused..</div><div>The intent was to reroute messages from production instance to dev instances on the same machine and take out a selected steam of logs on a different port.</div>
<div>rather than just the selected stream the second instance can see all the logs. Both the instances are listening on different ports.<br></div><div><br></div><div> Port 514- gets logs from two products (say windows and unix) i write Windows to disk and route the unix logs on say port 517 (to second instance)</div>
<div>Second instance is configure to write anything that it receives to a file.</div><div>To my surprise the above file has logs for Windows and there is no network exchange at all. <br></div><div><br></div><div>Could it be that the second instance internally confusing sources and destinations?</div>
<div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Mar 5, 2014 at 3:23 AM, Evan Rempel <span dir="ltr"><<a href="mailto:erempel@uvic.ca" target="_blank">erempel@uvic.ca</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">The persistence file is used to store the progress on the sources. If the source is from the network, then there<br>
isn't any progress, or stated differently, the concept of progress does not apply.<br>
<br>
If the source is reading from a file, then there is a "current position" in the file. If syslog-ng is stopped for<br>
a few minutes and then started again, it will resume from where it left of in the file.<br>
<br>
The control file can be used to send commands to a running instance of syslog-ng. You can get statistics and do other things.<br>
Best to read the manual on syslog-ng-ctl<br>
<span class="HOEnZb"><font color="#888888"><br>
Evan.<br>
</font></span><div class="im HOEnZb"><br>
On 03/04/2014 01:18 PM, Shashank Rohatgi wrote:<br>
> Evan<br>
><br>
> Thank you for your reply. I am new to syslog-ng on command line. Can you also explain what are a persist and control files?<br>
<br>
<br>
</div><div class="HOEnZb"><div class="h5">______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</div></div></blockquote></div><br></div>