I like solution #1 and decided to try it, but now I get

    Compiling p_json sequence [parser] at [/etc/syslog-ng/syslog-ng.conf:1]
      Compiling #unnamed single [log] at [/etc/syslog-ng/syslog-ng.conf:1]
Segmentation fault

This is using syslog-ng 3.5 and the fault happens in libc-2.19.so.

Could it be a bug in the version and if so, should I compile from source with 3.12?

On Fri, Nov 3, 2017 at 3:35 PM, Fabien Wernli <wernli@in2p3.fr> wrote:

Hi,

2 solutions:

1. use rewrite rules upstream to set $source then use --pair source=$source

2. use persist-name(myname) in the two destinations config

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

--

Alicia Smith

@phrozyn
Information Security Engineer

asmith@mozilla.com