The problem here was the following entry in the syslog-ng.conf on the loghost destination messages { file("/var/adm/$HOST/messages"); udp("168.123.43.5" port(514)); }; The udp entry here will cause syslog-ng to log the same over and over again (nonstop). -mike On 7/12/05, Roberto Nibali <ratz@drugphish.ch> wrote:
I want to log to a loghost. If I specify udp as follows in the source statement
It's always helpful if you post all of your configuration if possible, at least to me.
udp(ip("0.0.0.0") port(514));
syslog-ng keeps logging the same entry over and over again. Without it it works fine for the loghost but clients will not be able to connect of course.
Over which interface do your clients connect? Put this IP as udp source in your src statement. How do you log to your remote loghost? By udp? So I guess it picks the sent message up again in the src statement because you specified INADDR_ANY.
Cheers, Roberto Nibali, ratz -- echo '[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq' | dc