Hello Pavel- This was exactly what I was looking for and it worked perfectly after I removed the ';' after port(1999) in your example. So basically I have: destination d_tcp { tcp("x.x.x.x" port(1999) localip("x.x.x.x")); }; Thanks again -Brandon On Fri, Oct 24, 2008 at 12:43 AM, Pavel Shaydo <pshaydo@elverils.com> wrote:
On Thu, 2008-10-23 at 15:48 -0700, brandon askme wrote:
Hello- I have successfully moved all of our servers over to syslog-ng. All but a few are reporting to the remote "logging" server I have setup. What I have found is that the clients that are not reporting have multiple interfaces, IE eth0, eth0:1, eth1 etc.. Thus the current firewall rules are not setup to allow all the ips. So my question is, can I configure syslog-ng to only use a certain ip/interface when sending the logs to the remote logging server? The clients and the remote logging server are running Linux.
Hello,
probably you should look on localip() option of destination driver.
destination d_tcp { tcp("10.1.2.3" port(1999); localip("10.3.2.1") ); };
-- Best regards, Pavel Shaydo
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html