RE: [syslog-ng]config questions

AF> yep, there is a predefined filter named "DEFAULT" which should do AF> what you're after.

Ah, you're quite right. Though

destination default { file("/var/log/default-$YEAR$MONTH$DAY"); }; log { source(src); filter(DEFAULT); destination(default); };

doesn't seem to work, no file is created. Any ideas?

Are any messages from source(src) making it to the default filter? If not, no file will ever be created. Find a situation your other rules dont cater for (an unusual facility, for instance), and use 'logger' to create log messages to see if the problem is syslog-ng or simply you dont have any 'extra' messages which need catching by a default rule. -- afort