17 Jan
2010
17 Jan
'10
2:26 p.m.
This config worked in syslog-ng 2.1 source NET {udp(port(514)); tcp(port(5140) keep-alive(yes));}; destination A { file("/var/log/A"); }; destination B { file("/var/log/B"); }; filter A { host ("A");}; filter A { host ("A");}; log { source(NET); destination(A); filter(A); }; log { source(NET); destination(B); filter(B); }; worked as expected that is log messages coming from host A went to /var/log/A file and log messages coming from host B went to /var/log/B. The two hostnames are resolved locally in /etc/hosts After upgrading to 3.0.x all the messages duplicated in both files so that messages coming from A are written in /var/log/A AND /var/log/B and vice-versa. Any idea why it does not work in 3? Thank you, Jerry