<div dir="ltr">Hi,<div><br></div><div>It's a bit tricky on the destination side, you don't need the "ip" option:</div><div><br></div><div><a href="https://www.balabit.com/sites/default/files/documents/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html-single/index.html#configuring-destinations-syslog">https://www.balabit.com/sites/default/files/documents/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html-single/index.html#configuring-destinations-syslog</a><br></div><div><br></div><div><div>@version:3.7</div><div>@include "scl.conf"</div><div><br></div><div>source s_local {</div><div> internal();</div><div>};</div><div><br></div><div>destination d_network { syslog("135.254.163.151" transport("tcp")); };</div><div><br></div><div>destination d_local {</div><div> file("/var/log/messagesgiri");</div><div>};</div><div><br></div><div>log {</div><div> source(s_local);</div><div> destination(d_local);</div><div> destination(d_network);</div><div>};</div></div><div><br></div><div>Regards,</div><div>László Várady</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Feb 28, 2016 at 11:05 AM, Girish Kumar <span dir="ltr"><<a href="mailto:girish.kumar@al-enterprise.com" target="_blank">girish.kumar@al-enterprise.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal">Hi All,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">In the conf file I have added destination as network. But I am getting following error while spawning the syslog-ng .<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Could you please help me on this<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">[root@localhost vsabarin]# /sbin/syslog-ng<u></u><u></u></p>
<p class="MsoNormal">Error parsing afsocket, syntax error, unexpected KW_IP, expecting LL_IDENTIFIER or LL_STRING in /etc/syslog-ng/syslog-ng.conf at line 12, column 32:<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">destination d_network { syslog(ip("135.254.163.151") transport("tcp")); };<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><b>My syslog-ng.conf file<u></u><u></u></b></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">@version:3.7<u></u><u></u></p>
<p class="MsoNormal">@include "scl.conf"<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">source s_local {<u></u><u></u></p>
<p class="MsoNormal"> internal();<u></u><u></u></p>
<p class="MsoNormal">};<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">destination d_network { syslog(ip("135.254.163.151") transport("tcp")); };<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">destination d_local {<u></u><u></u></p>
<p class="MsoNormal"> file("/var/log/messagesgiri");<u></u><u></u></p>
<p class="MsoNormal">};<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">log {<u></u><u></u></p>
<p class="MsoNormal"> source(s_local);<u></u><u></u></p>
<p class="MsoNormal"> destination(d_local);<u></u><u></u></p>
<p class="MsoNormal"> destination d_network);<u></u><u></u></p>
<p class="MsoNormal">};<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Regards,<u></u><u></u></p>
<p class="MsoNormal">Girish<u></u><u></u></p>
</div>
</div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>