Perfect! The last last question, is it posible to NOT write on local5 file? I have same info on the apache and local5 files. Best regards. -----Mensaje original----- De: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] En nombre de Gergely Nagy Enviado el: jueves, 14 de julio de 2011 12:06 Para: Syslog-ng users' and developers' mailing list Asunto: Re: [syslog-ng] Apache vhost logs Josu Lazkano <josu.lazkano@barcelonamedia.org> writes:
filter f_local5 { facility(local5); };
destination d_apache { file("/var/log/apache.log"); };
log { source(s_all); filter(f_local5); destination(d_apache); };
But I want to save the apache logs on a directory inside each host:
destination extern { file("/var/log/extern/${HOST}/${YEAR}-${MONTH}/${FACILITY}"); };
I wan tto change the name "local5" to "apache"
That's not possible like this. However, since you already filter on f_local5, you can add another destination, along side extern: destination d_apache { file("/var/log/extern/${HOST}/${YEAR}-${MONTH}/apache"); }; (This would replace the d_apache you have in your configs now) -- |8] ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq