Hi,

if you want a source to listen only on a specific interface, use the ip() parameter of the source to set the IP address ( https://www.balabit.com/sites/default/files/documents/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/reference-source-syslog-chapter.html#idp3603696 ). If the interface has multiple IP addresses, then you'll need multiple sources.

If you want a destination to send logs towards a specific interface, then AFAIK you'll have to set the localip() option of the destination (https://www.balabit.com/sites/default/files/documents/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/reference-destination-syslog-chapter.html#idp8578992).

Regards,

Robert

On Mon, Apr 11, 2016 at 7:24 PM, Dave Florek <dave.a.florek@gmail.com> wrote:
Hi,

How do I configure syslog-ng to use a specific ethernet interface on a computer with multiple interfaces enabled?

Sincerely,

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq