I like solution #1 and decided to try it, but now I get

    Compiling p_json sequence [parser] at [/etc/syslog-ng/syslog-ng.conf:1]
      Compiling #unnamed single [log] at [/etc/syslog-ng/syslog-ng.conf:1]
Segmentation fault

This is using syslog-ng 3.5 and the fault happens in libc-2.19.so.

Could it be a bug in the version and if so, should I compile from source with 3.12?


On Fri, Nov 3, 2017 at 3:35 PM, Fabien Wernli <wernli@in2p3.fr> wrote:
Hi,

2 solutions:

1. use rewrite rules upstream to set $source then use --pair source=$source

2. use persist-name(myname) in the two destinations config

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq




--

Alicia Smith
@phrozyn
Information Security Engineer