I have several systems that are sending there log files to syslog-ng, without issue. I having an issue getting syslog-ng to work with logs from our Brocade MLX’s. I run wireshark on the syslog server and see the file hit it. However, syslog-ng does not put it in its folder or any where else. Sections of the config file relevant to the Brocade. destination d_bro { file("/home/hosts/brocade/$YEAR$MONTH$DAY-$HOST.log"); }; ##################### # BROCADE ##################### filter f_bro { not level(debug) and ( host( "BROCADE-BG-MLX" ) or host( "BROCADE-BG-FESX" ) or host( "BROCADE-BR-MLX" ) or host( "BROCADE-DUCK-FESX" ) or host( "BROCADE-ELJY-MLX" ) or host( "BROCADE-JSPR-MLX" ) or host( "BROCADE-STUDIO-FESX" ));}; log { source(s_net); filter(f_bro); destination(d_bro); }; Wireshark on the server - Capture.PNG
