<div dir="ltr">Hi Gergely,<div>My configuration my of both client and server side.</div><div><br></div><div>>>>>>>>>>>>>>>>>>>>>>>>>>>>>client confg<<<<<<<<<<<<<<<<<<<<<<<<<<<</div><div><div>@version:3.13</div><div>@include "scl.conf"</div><div>@define allow-config-dups 1</div><div><br></div><div>#options {</div><div># flush_lines (0);</div><div># time_reopen (10);</div><div># log_fifo_size (1000);</div><div># chain_hostnames (off);</div><div># use_dns (no);</div><div># use_fqdn (no);</div><div># create_dirs (no);</div><div># keep_hostname (yes);</div><div>#};</div><div><br></div><div>source s_local {</div><div> system();</div><div> internal();</div><div> </div><div>};</div><div>destination d_network {udp("192.168.122.67" port(514));</div><div><br></div><div>};</div><div><br></div><div>destination d_local {</div><div> file("/var/log/messages");</div><div>};</div><div><br></div><div>log{</div><div> source(s_local);</div><div> destination(d_network);</div><div> destination(d_local);</div><div><br></div><div>};</div><div><br></div><div>source s_local{ </div><div> wildcard-file(</div><div> base-dir("/usr/local/apache/logs")</div><div> filename-pattern("*.log")</div><div> recursive(no)</div><div> follow-freq(1));</div><div>};</div><div><br></div><div>destination d_network {tcp("192.168.122.67" port(514));</div><div><br></div><div>};</div><div><br></div><div>log{</div><div> source(s_local);</div><div> destination(d_network);</div><div> </div><div>};</div><div><br></div></div><div>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>server side cong<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<</div><div><div>@version:3.13</div><div>@include "scl.conf"</div><div><br></div><div>source s_local{system(); internal();};</div><div>source s_network{</div><div><br></div><div> udp();</div><div> tcp();</div><div><br></div><div>};</div><div><br></div><div>destination d_local{file("/var/log/messages");};</div><div>destination d_from_net{file("/var/log/from_net");};</div><div>log{</div><div> source(s_local);</div><div> destination(d_local);</div><div>};</div><div>log { source(s_network); destination(d_from_net); };</div><div><br></div><div><br></div><div>source s_net {</div><div> network(flags(no-parse));</div><div>};</div><div><br></div><div>parser p_apache {</div><div> csv-parser(</div><div> columns("apache.FILE_NAME", "apache.MESSAGE")</div><div> flags(greedy)</div><div> );</div><div>};</div><div>destination d_apache {</div><div> file("/usr/local/apache/logs/${apache.FILE_NAME}"</div><div> template("${apache.MESSAGE}\n"));</div><div>};</div><div><br></div><div>log{</div><div> source (s_net);</div><div> parser (p_apache);</div><div> destination(d_apache);</div><div>};</div></div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div><b><font color="#0000ff"><i>Thanks & Regards </i></font>:-<br></b></div><b>VINOD SINGH SAUD<br></b></div><div><b>(M):- 09718663552<br></b></div><div><b><font color="#00ff00">(W):-09997645597</font><br></b></div><div><b>(E) :- <a href="mailto:vinod.samant.123@gmail.com" target="_blank">vinod.samant.123@gmail.com</a><br></b></div></div></div></div></div></div>
<br><div class="gmail_quote">On Mon, May 14, 2018 at 5:30 PM, Gergely Nagy <span dir="ltr"><<a href="mailto:algernon@balabit.com" target="_blank">algernon@balabit.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">>>>>> "vinod" == vinod samant <<a href="mailto:vinod.samant.123@gmail.com">vinod.samant.123@gmail.com</a>> writes:<br>
<br>
</span> vinod> When i am going to comment those lines on server side ,syslog-ng is<br>
vinod> working fine ,But all logs are coming in one file<br>
vinod> */var/log/from_net .*<br>
<br>
Can you show us your *full* configuration, including any included config<br>
files? In the samples I showed, there is no `/var/log/from_net`, so my<br>
suspicion is that some other part of your configuration sets up a<br>
similar source, and a logpath that routes those logs elsewhere.<br>
<br>
vinod> *Is it necessary to define port in server side configuration<br>
vinod> file also?*<br>
<br>
No, it has a default port, and the client side will use the same default<br>
port when no port is specified. But if you do specify a different port<br>
on either side, the other one will have to be adapted too.<br>
<br>
vinod> *Can you share wildcard configuration for both server side and cilent<br>
vinod> side?*<br>
<br>
I did, a few messages ago.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- <br>
|8]<br>
</font></span></blockquote></div><br></div>