Date sent: Tue, 31 Aug 1999 22:53:02 +0200 From: Balazs Scheidler <bazsi@balabit.hu> To: syslog-ng@venus.terrasoft.hu Subject: Re: [syslog-ng] Remote loging and facility seperation of incoming logs. Send reply to: syslog-ng@venus.terrasoft.hu
On Tue, Aug 31, 1999 at 10:40:44AM -0400, deant@stsi.net wrote:
Salutations all,
I am attempting to set up a network log server for our Debian and RedHat servers. I can cause the other boxen to send the information to the log server. The log server receives the packets. However, I am having some difficulty separating the inbound packets by box and routing them to different files by facility. Any assistance would be appreciated.
Instead of filtering based on facility, use the host() filter to sort messages belonging to different hosts to different destinations:
source s_net { udp(); };
filter f_host1 { host("host1"); destination d_host1 { file("/var/log/host1/messages"); };
log { source(s_net); filter(f_host1); destination(d_host1); };
-- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/syslog-ng
Thank You Sir that apears to work well.
T. Dean Tate <> deant@stsi.net <> UNIX SYSADMIN ************************************************************************* The Shreveport Times (August 19, 1999), points out that since 1993, 82 children have been killed in school shootings; 99 children have been killed in that same period by goverment-mandated airbags.