initiolized a new configuration. but i can´t get it to log system messages. i used:
source src { unix-stream("/dev/log"); internal(); }; and source src { unix-stream("/etc/.syslog_door"); internal(); };
i tested both configurations with # logger -t auth.debug "bla" .. but never got a response into my logfile.
Solaris uses STREAMS instead of AF_UNIX sockets to deliver log messages. Support for this is not perfect yet, though you may give it a try. You should use this source statement: source src { sun-streams("/dev/log" door("/etc/.syslog_door")); }; As it seems from the previous posts, Solaris support is broken right now, but I plan to release 1.1.30 RSN, and it will contain a few fixes. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt