@version: 3.12
#@include "/usr/local/syslog-ng/etc/scl/*/*.conf"

options{ 
        use_dns(no) ;
        use_uniqid(yes) ;
        time_reopen(5) ;
        time_reap(90000) ;
        frac-digits(2) ;
} ;

source in_internal {
        internal() ;
} ;

source in_test {
        file( "/var/syslog-ng/test.log"
                flags(no-parse)
        ) ;
} ;
source in_var_log_daemon { file( "/var/log/daemon.log" flags(no-parse) ) ; } ;
source in_var_log_rsyncd { file( "/var/log/rsyncd.log" flags(no-parse) ) ; } ;
source in_var_log_authlog { file( "/var/log/authlog" flags(no-parse) ) ; } ;
source in_var_log_syslog { file( "/var/log/syslog" flags(no-parse) ) ; } ;
source in_var_adm_messages { file( "/var/adm/messages" flags(no-parse) ) ; } ;
source in_var_cron_log { file( "/var/cron/log" flags(no-parse) ) ; } ;
source in_var_svc_log { 
        wildcard-file( 
                base-dir("/var/svc/log") 
                filename-pattern("*.log")
                recursive(no)
                follow-freq(2)
                flags(no-parse) 
        ) ; 
} ;

destination out_internal {
        file( "/var/syslog-ng/syslog-ng.log"
             create-dirs(yes)
        ) ;
} ;
destination out_socket {
        unix-stream( "/var/syslog-ng/logserver.socket" 
                template("JSON: $(format-json --key LOGHOST,FILE_NAME,ISODATE,RCPTID,RUNID,SEQNUM,TAGS,MSG)\n")
                disk-buffer(
                        mem-buf-size(10000)
                        disk-buf-size(2000000)
                        reliable(yes)
                        dir("/var/syslog-ng")
                )
                flags(syslog-protocol)
        ) ;
} ;

log {
        source(in_internal) ;
        destination(out_internal) ;
} ;

log {
        source(in_test) ; 
        source(in_var_log_daemon) ; 
        source(in_var_log_rsyncd) ; 
        source(in_var_log_authlog) ; 
        source(in_var_log_syslog) ; 
        source(in_var_adm_messages) ; 
        source(in_var_cron_log) ; 
        source(in_var_svc_log) ; 
        destination(out_socket) ;
        flags(flow-control) ;
} ;

@include "/etc/syslog-ng.d/[0-9]*.conf"