On Thu, 2008-10-23 at 15:48 -0700, brandon askme wrote:
Hello- I have successfully moved all of our servers over to syslog-ng. All but a few are reporting to the remote "logging" server I have setup. What I have found is that the clients that are not reporting have multiple interfaces, IE eth0, eth0:1, eth1 etc.. Thus the current firewall rules are not setup to allow all the ips. So my question is, can I configure syslog-ng to only use a certain ip/interface when sending the logs to the remote logging server? The clients and the remote logging server are running Linux.
Hello, probably you should look on localip() option of destination driver. destination d_tcp { tcp("10.1.2.3" port(1999); localip("10.3.2.1") ); }; -- Best regards, Pavel Shaydo