Well the problem is that with that config, the syslog message was not logged to the file :-( I was hoping there was some misconfig. I tried to debug the syslog, using -vd but there did not seem to be much info. Is there any other recommended way for debugging? Thanks Gef -----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Balazs Scheidler Sent: 16 January 2009 14:49 To: Syslog-ng users' and developers' mailing list Subject: Re: [syslog-ng] YACC Stack Overflow On Fri, 2009-01-16 at 14:15 +0100, Cauchi, Geoffrey, VF-MT wrote:
Hi
Thanks for your suggestion to use macros. This should do the job with the minimum changes to the server. Furthermore it will allow me to reduce the config by a huge number of lines. :-)
I tried the following, but I'm doing something incorrect :(
source Cisco_Switch { udp(ip(0.0.0.0) port(514)); };
destination d_files_per_ip {
file("/var/log/cisco/switches/$SOURCEIP/log.txt"
perm(0755) dir_perm(0755) create_dirs(yes) ); };
log { source(Cisco_Switch); destination(d_files_per_ip); };
And what's the problem? the config seems to be just fine. -- Bazsi ________________________________________________________________________ ______ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html ------------------------------------------------------------------------------------- Vodafone Life is Now ------------------------------------------------------------------------------------- This email is intended only for the use of individuals to whom it is addressed, as it may contain confidential or privileged information. If you are not a named addressee, intended recipient, or the person responsible for delivering the message to the named addressee, be advised that you have received this email in error and that you should not disseminate, distribute, print, copy this mail or otherwise divulge its contents. In such instances, please notify Vodafone Malta Limited on telephone number +356 99999247 and delete this email from your system. Since this transmission was affected via email, Vodafone Malta Limited cannot guarantee that it is secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Vodafone Malta Limited does not accept liability for any errors or omissions in the contents of this message which arise as a result of email transmission. Save the environment for our children - Print e-mail only when necessary.