I am using the following script to test syslog-ng. (Running this from the same machine as the syslog-ng server):
#!/bin/bash
d=`date '+%y%m%d_%H%M%S'`
logger -p kern.debug "__kern.debug__ $d"
sleep 1;
d=`date '+%y%m%d_%H%M%S'`
logger -p kern.crit "__kern.crit__ $d"
sleep 1;
d=`date '+%y%m%d_%H%M%S'`
logger -p kern.info "__kern.info__ $d"
sleep 1;
However, here is how the messages are being seen within syslog-ng:
Jul 21 10:30:35 log01 cars: [ID 702911 user.debug] __kern.debug__ 100721_103035
Jul 21 10:30:36 log01 cars: [ID 702911 user.crit] __kern.crit__ 100721_103036
Jul 21 10:30:37 log01 cars: [ID 702911 user.info] __kern.info__ 100721_103037
The facility is being seen as user and not kern...
Anyone have any ideas?
Thx,