Hello, 

I do not recall if syslog-ng is logging the TLS session lifecycle (start/stop), but you can use internal() source to capture those logs that syslog-ng itself writes.

You can use this as any other source, as such to save to a local file. 

--
Kokan

On Sat, 5 May 2018, 10:56 am Hirbod Moriani, <hirbodmoriani@gmail.com> wrote:

Hi everyone,

I want to save log from syslog-ng daemon itself. For example "start a TLS session"/"end of a TLS session" or something like that should be logged. It's possible in syslog-ng CE? and how to config syslog-ng to save daemon logs locally?



______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq