Re: [syslog-ng] problem to filter remote-logs on syslog-server

Am 08.06.2011 11:22, schrieb Gergely Nagy:

That's because you have two sources that both try to listen on udp port 514, which will not work.

A better solution would be to remove it from the src source, and use two sources in the log path.

Something like this:

source src {internal(); unix-dgram("/dev/log"); unix-dgram("/var/lib/named/dev/log"); }; source network { udp(port(514)); };

log { source(src); source(network); filter(f_foo); destination(d_foo); };

thanks. i removed source network. everything is working as expected now.