I’ve had syslog-ng on a Linux 7.1 box for a couple months and it’s been running great. 

 

I’m attempting to setup remote logging on the various Cisco routers on my network and have them point to syslog-ng.  I think the Cisco configurations are set up correctly since I have a sniffer on the network and I can see the packets going to the Linux box, but nothing shows up in syslog-ng that I can see.

 

What should I be using in the syslog-ng configuration to isolate the relevant data?  I’ve unsuccessfully tried several.