Brian Loe wrote:
Last time I'll respond to my own post - but I can't believe I didn't catch this. I hadn't listed every source for the proper destinations with the exception of the two files that were being opened.
However, am I listing sources properly in the log statements?
It is syntactically correct. However, nobody can answer your question properly (you are using the filter named f_fire which wasn't in your previous posts, so I have to assume that you have modified your configuration). Without knowing your current configuration I can only answer like this: if a message comes from your any of the sources and matches all of the filters then it will be logged through the destinations. When you don't see logs, check with tcpdump whether the log packets reach the syslog-ng server, do they contain the needed texts which the filters match, and so on... -- Sandor Geller wildy@balabit.hu