Hi,

below are the few logs generated in my local machine.

In that first 2 logs are generated through one application and last log generated through second application. But as you can see all logs have the originating source as the pc196070/pc196070 which is the last 5 digits of my machine's ip address. I want to differentiate the logs coming from different application!! How can it possible?? ..You suggest me program filter...So is that a solution??...if yes then please let me know how to use it exactly...I am blank in how to use it..

05/Apr/2007 11:18:36 pc196070/pc196070 DEBUG: - [Thread- 62/Client-0] Response: RESP:0;

05/Apr/2007 11:18:36 pc196070/pc196070 Thread-62/Client-0] received: Enter command

05/Apr/2007 11:18:36 pc196070/pc196070 INFO: -NpiListener.Listener - Port 12346 successfully opened. Waiting for connecti...

Thank you.

B.R.

Ash.

From: syslog-ng-bounces@lists.balabit.hu on behalf of Geller, Sandor (IT)
Sent: Wed 4/4/2007 11:37 AM
To: Syslog-ng users' and developers' mailing list
Subject: RE: [syslog-ng] More then one application on same server

> Hi,
> Thank you very much for your reply.
> But as I am new in this so can you please be more specific
> that how can I use the Program() filter??
> Let me again tell you my specific issue- I have a Tomcat
> server running and in that server I have 3 application or
> nodes that generates the logs and dump into tomcat
> server....Now when I use the syslog it gives me all the logs
> mix with the generating source name as the hostname (tomcat
> server)....but I want that syslog should give me the logs
> which has the field in it from which I can identify that this
> log is generated in this application and this is in other...
> So I hope I describe the problem to give you exact idea!!
> I will be thankful to you if you help me in this.

Could you show some lines from your log originating from
different programs? I'm not familiar with tomcat, so I
don't understand your issue exactly...

Maybe the logs have a field which could be used to
differentiate between your tomcat apps.

Regards,

Sandor
--------------------------------------------------------

NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.
_______________________________________________
syslog-ng maillist - syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html