Hi, user.info is the default for non-kernel sources when the priority isn't set. You can't override PRI for the incoming logs in syslog-ng 2.1 however you can assign a template when you forward the logs to another syslog-ng instance. Use something like source s_myfifo { pipe("/foo/bar"); }; destination d_anothersyslog { tcp(1.2.3.4 port(514) template("<30> ${ISODATE} ${HOST} ${MESSAGE}\n")); }; log { source(s_myfifo); destination(d_anothersyslog); }; in the template the first field is the decimal priority code, for example <30> means daemon.info Regards, Sandor On Mon, May 2, 2011 at 11:47 PM, Ray Van Dolson <rvandolson@esri.com> wrote:
[ Wasn't subscribed to the list -- apologies if this ends up getting posted twice. ]
I have a source (a FIFO/pipe) which I am re-emitting to another syslog-ng server via TCP.
How do I define what facility and priority the data from this source is transmitted with? What is the default (daemon.info?)?
This is syslog-ng 2.1.4 (old I know).
Thanks, Ray ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html