# # Solaris 2.5.1 and below uses the STREAMS driver, above extends it # with doors. For 2.5.1 remove the door() option from the source declaration. # options { log_fifo_size(1000); }; source local { sun-streams("/dev/log"); internal(); udp(ip("0.0.0.0") port(514)); }; destination all { file("/var/adm/messages"); }; destination phenix { udp("x.x.x.x" port(514)); }; filter f_named { match("match") and match("unapproved") }; log { source(local); filter(f_named); destination(phenix); }; log { source(local); filter(DEFAULT); destination(all); };