Philip, you may not be aware that the record sent to syslog is not a simple text string. It has the priority/facility encoded within "<>" at the front of the record. If you're not including this it's possible that syslog-ng is simply discarding it. You can see this format by setting up a program target (say a simple shell script) to capture the raw output. -----Original Message----- From: syslog-ng-admin@lists.balabit.hu [mailto:syslog-ng-admin@lists.balabit.hu]On Behalf Of Wang, Philip R. Sent: Friday, January 23, 2004 9:32 PM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng]receiving external events I am new to syslog-ng. I used the following config file to test it out under Solaris. Then I used a pc application to generate udp message to port 514. I started the process using "syslog-ng -f filename". I can see log message in "messages" indicating the process started. However, when I send the simulated message from my PC app. It does not show up in the log file. I was reading some Linux syslog-ng document: an chapter from a book. It mentioned using the '-r' option to allow accepting remote message. I have syslog 1.6.1 and it does not have this option. Not sure if I missed anything? Philip --------------------------------------------------------------------- source local { internal(); udp();}; destination all { file("/opt/syslog-ng/messages"); }; log { source(local); destination(all); }; ----------------------------------------------------------------------- _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html