Hello, this is possible with syslog-ng. You can configure it to create a directory for each server, and let it store the log in different files/category in their own directory. For example, A logs to S, and syslog-ng at S stores the log to /var/log/HOSTS/A/logfile locally on S. I have this configured in my syslog-ng: destination hosts { file("/var/log/HOSTS/$HOST/$FACILITY/$YEAR/$MONTH/$DAY/$FACILITY$YEAR$MONTH$DAY" owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(yes)); }; log { source(src); destination(hosts); }; There is a mini-howto on http://www.campin.net/newlogcheck.html. And it's no problem porting from syslogd to syslog-ng :) cheers
hi , I have three machines A B and C which run syslog (not syslog-ng) and they send now their logs toward a remote host S. How is it possible with syslogd (running over S) to manage differents logs from A, B and C according to the log source (i.e create a file for log coming from A , an other file for log coming from B and an other file for C). the machine S, which receive logs is running syslogd , how can it manage the logs coming from the others machines according to their source. If syslog is not able to manage this , can syslog-ng do it?how? thanks
-- Harald Nesland pryo@sacharis.no http://www.sacharis.no/