I have several systems that are sending there log files to syslog-ng, without issue. I having an issue getting syslog-ng to work with logs from our Brocade MLX’s. I run wireshark on the syslog server and see the file hit it. However, syslog-ng does not put it in its folder or any where else.
Sections of the config file relevant to the Brocade.
destination d_bro { file("/home/hosts/brocade/$YEAR$MONTH$DAY-$HOST.log"); };
#####################
# BROCADE
#####################
filter f_bro { not level(debug) and (
host( "BROCADE-BG-MLX" ) or
host( "BROCADE-BG-FESX" ) or
host( "BROCADE-BR-MLX" ) or
host( "BROCADE-DUCK-FESX" ) or
host( "BROCADE-ELJY-MLX" ) or
host( "BROCADE-JSPR-MLX" ) or
host( "BROCADE-STUDIO-FESX" ));};
log { source(s_net); filter(f_bro); destination(d_bro); };
Wireshark on the server - Capture.PNG
____________________________________________________________ __________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/? product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq