Re: Re : [syslog-ng] udp Error binding socket;

25 Jan 2007

      On Thu, 25 Jan 2007, news gonzo news gonzo wrote:
...
192.168.7.2 is remote
If I don't need to enter the IP how can I send it to a specfic log ?
thx

you can do something like this:

source s_remote_fw {
         udp(ip(ip_of_syslog_ng_host) port(514));
};
destination d_per_host
{
   file(   "/data/logs/$YEAR-$MONTH-$DAY/$HOST.txt"
                 owner(loguser)
                 group("loggroup")
                 perm(0440)
                 dir_perm(0775)
         );
};

  log
  {
   source(s_remote_fw);
   destination(d_per_host);
  };

tune it to your liking..
(The syslog-ng FAQ has a lot of information like this, including better 
sample configs than mine above)

Mike