<div dir="ltr">DNS ?  What if you used the IP address as a test?<div>Is Jasper-MLX-Security what is being set in the HOST header ? </div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jun 27, 2017 at 2:23 PM, PENLAND,MATTHEW & DANA <span dir="ltr"><<a href="mailto:matt@etcmail.com" target="_blank">matt@etcmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I have several systems that are sending there log files to syslog-ng, without issue. I having an issue getting syslog-ng to work with logs from our Brocade MLX’s. I run wireshark on the syslog server and see the file hit it. However, syslog-ng does not put it in its folder or any where else.<br>
<br>
<br>
Sections of the config file relevant to the Brocade.<br>
<br>
destination d_bro { file("/home/hosts/brocade/$<wbr>YEAR$MONTH$DAY-$HOST.log"); };<br>
<br>
<br>
#####################<br>
# BROCADE<br>
#####################<br>
<br>
filter f_bro  { not level(debug) and (<br>
                  host( "BROCADE-BG-MLX" ) or<br>
                  host( "BROCADE-BG-FESX" ) or<br>
                  host( "BROCADE-BR-MLX" ) or<br>
                  host( "BROCADE-DUCK-FESX" ) or<br>
                  host( "BROCADE-ELJY-MLX" ) or<br>
                  host( "BROCADE-JSPR-MLX" ) or<br>
                  host( "BROCADE-STUDIO-FESX" ));};<br>
<br>
log { source(s_net); filter(f_bro); destination(d_bro); };<br>
<br>
<br>
Wireshark on the server - Capture.PNG<br>
<br>
<br>______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>