I have included my config On Thursday 12 January 2006 20:11, Peter Koinange wrote:
I have a very basic setup at the monet for syslog-ng server, am just writing everything i get to the database regardless of the facility/severity combination since the database can get check for specific details
k source src {unix-stream("/dev/log"); pipe("/proc/kmsg"); internal();}; source s_udpmessages { udp(); };
destination d_mysql { pipe("/var/log/mysql.pipe" template("INSERT INTO logs (host, facility, priority, level, tag, datetime, program, msg) VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL', '$TAG', '$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC','$PROGRAM', '$MSG' );\n") template-escape(yes)); }; log { source(src); destination(d_mysql); }; log { source(s_udpmessages); destination(d_mysql); };
On Thursday 12 January 2006 20:00, Bill Nash wrote:
This is kind of a silly question, but did you bounce the syslogd after you made that config change? Assuming you're sending this to a syslog-ng daemon as a central collection source, where is the syslog-ng daemon configured to place logs for that facility/severity combination?
- billn
syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html