<div dir="ltr"><div dir="ltr"><div><br></div><div>Here is my config</div><div>@version:3.5</div><div>@include "scl.conf"</div><div><br></div><div># syslog-ng configuration file.</div><div>#</div><div># This should behave pretty much like the original syslog on RedHat. But</div><div># it could be configured a lot smarter.</div><div>#</div><div># See syslog-ng(8) and syslog-ng.conf(5) for more information.</div><div>#</div><div># Note: it also sources additional configuration files (*.conf)</div><div># located in /etc/syslog-ng/conf.d/</div><div><br></div><div>options {</div><div> flush_lines (0);</div><div> time_reopen (10);</div><div> log_fifo_size (250000);</div><div> chain_hostnames (off);</div><div> use_dns (no);</div><div> use_fqdn (no);</div><div> create_dirs (no);</div><div> keep_hostname (yes);</div><div>};</div><div><br></div><div>source s_sys {</div><div> system();</div><div> internal();</div><div> # udp(ip(0.0.0.0) port(514));</div><div>};</div><div><br></div><div>source s_net {</div><div>udp(ip(0.0.0.0) port(514));</div><div>#tcp(ip(0.0.0.0) port(514) max-connections(256));</div><div>};</div><div><br></div><div>destination d_cons { file("/dev/console"); };</div><div>destination d_mesg { file("/var/log/messages"); };</div><div>destination d_auth { file("/var/log/secure"); };</div><div>destination d_mail { file("/var/log/maillog" flush_lines(10)); };</div><div>destination d_spol { file("/var/log/spooler"); };</div><div>destination d_boot { file("/var/log/boot.log"); };</div><div>destination d_cron { file("/var/log/cron"); };</div><div>destination d_kern { file("/var/log/kern"); };</div><div>destination d_mlal { usertty("*"); };</div><div><br></div><div><br></div><div>destination d_graylog {</div><div>tcp("graylog.host"</div><div>port (12201)</div><div>);</div><div>};</div><div><br></div><div><br></div><div>filter f_kernel { facility(kern); };</div><div>filter f_default { level(info..emerg) and</div><div> not (facility(mail)</div><div> or facility(authpriv) </div><div> or facility(cron)); };</div><div>filter f_auth { facility(authpriv); };</div><div>filter f_mail { facility(mail); };</div><div>filter f_emergency { level(emerg); };</div><div>filter f_news { facility(uucp) or</div><div> (facility(news) </div><div> and level(crit..emerg)); };</div><div>filter f_boot { facility(local7); };</div><div>filter f_cron { facility(cron); };</div><div><br></div><div>log { source(s_sys); filter(f_kernel); destination(d_cons); };</div><div>log { source(s_sys); filter(f_kernel); destination(d_kern); };</div><div>log { source(s_sys); filter(f_default); destination(d_mesg); };</div><div>log { source(s_sys); filter(f_auth); destination(d_auth); };</div><div>log { source(s_sys); filter(f_mail); destination(d_mail); };</div><div>log { source(s_sys); filter(f_emergency); destination(d_mlal); };</div><div>log { source(s_sys); filter(f_news); destination(d_spol); };</div><div>log { source(s_sys); filter(f_boot); destination(d_boot); };</div><div>log { source(s_sys); filter(f_cron); destination(d_cron); };</div><div><br></div><div><br></div><div><br></div><div>log { source(s_net); destination(d_graylog); };</div><div>log { source(s_sys); filter(f_default); destination(d_graylog);};</div><div><br></div><div># Source additional configuration files (.conf extension only)</div><div>@include "/etc/syslog-ng/conf.d/*.conf"</div><div><br></div></div></div><br><div class="gmail_quote"><div dir="ltr">On Tue, Oct 30, 2018 at 8:00 AM Monitto Pitchaimani sebastin (mopitcha) <<a href="mailto:mopitcha@cisco.com">mopitcha@cisco.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-IN" link="#0563C1" vlink="#954F72">
<div class="m_5325791127798399729WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt">Hi All,<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt">Is there a way to update the syslog-ng config without restarting the syslog-ng?<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt">Regards,<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt">Monitto<u></u><u></u></span></p>
</div>
</div>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>