Thank you for your feedback! But today I solved the problem and shame on me, it was not a failure of syslog-ng. I've discovered a hard to find copy/paste error in the config file. The log object of interest has had a wrong source entry. So nothing has been logged because nothing of interest comes from the chosen source. So sorry for bothering the list with that. Kind Regards Werner Am Dienstag, 22. August 2006 18:10 schrieb Donald Rush:
Thank you for your input. I am not having an issue with getting the logs from different devices into different log files. What is happening is that in the standard config with the Suse syslog-ng.conf file, it logs all messages in one file, which I would like to keep, but I would like to exclude anything from a remote system. You might be telling me below, but I don't seem to be getting it. Below is out of the syslog-ng.conf, what I would like to do is filter out any remote system from that.
filter f_messages { not facility(news, mail) and not filter(f_iptables); };
# # All messages except iptables and the facilities news and mail: # destination messages { file("/var/log/messages"); }; log { source(src); filter(f_messages); destination(messages); };
-----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Werner Thal Sent: Tuesday, August 22, 2006 5:59 AM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] netmask
Hallo,
I try to use the "netmask" filter option to generate seperate logfiles for different subnets. I tried this filter krzn_all { netmask("10.254.0.0/255.255.0.0"); }; this filter krzn_all { netmask(10.254.0.0/255.255.0.0); }; this filter krzn_all { netmask("10.254.0.0/16"); }; and this filter krzn_all { netmask(10.254.0.0/16); };
No errors have been reported starting syslog-ng but also no messages have been logged.
I use syslog-ng 2.0rc1-2 on a debian Etch.
Kind Regards W. Thal
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html