Evan Rempel wrote:

To get the "statistics" messages or the "mark" messages you need to include a
source of internal()

The "Duplicate stats counter; counter=..." WARNING is just
reporting that you have multiple destinations to the same IP Address,
in your case to the IP address of 27.0.0.1:61514 which is fine, since
syslog-ng will report TOTAL statistics to this destination.

Evan.

Hi Evan,

I resolved the problem including "internal()" as source:

source s_system {       internal();
                        file("/var/log/messages" follow_freq(1));
                        file("/var/log/secure" follow_freq(1));
                        file("/var/log/cron" follow_freq(1));
                        file("/var/log/up2date" follow_freq(1));
                        file("/var/log/osad" follow_freq(1)); };

Thank you very much.
Alberto.