Fernando, I have this filters and destinatiosn in my configuration file: #============== source s_all { unix-stream("/dev/log"); internal(); }; destination d_ldap { file("/var/log/ldap.log"); }; filter f_syslog { not facility(auth, authpriv) and not match(slapd); }; filter f_ldap { match("slapd"); }; log { source(s_all); filter(f_syslog); destination(d_syslog); }; log { source(s_all); filter(f_ldap); destination(d_ldap); }; #=============== Tha's all that you need to send all ldap messages to one single file. Gustavo

Date: Fri, 11 Aug 2006 12:15:03 -0300 From: "Fernando Loureiro" <loureiro.fernando@gmail.com> Subject: [syslog-ng] How can i log messages from slapd in one file and not /var/log/messages To: syslog-ng@lists.balabit.hu Message-ID: <a000e3310608110815i15f6a5b5rdc513481f3bae7ee@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed

Hi All,

I want to know how can i have all my log messages inside a file called slapd.log.

Actually it´s logging most messages in /var/log/messages and some in /var/log/slapd/slapd.log.

I created the following filter for this daemon: filter f_openldap { program(slapd); };

And, by the way, i don´t know whenever to use which of those filter functions. Can somebody explain me?

Att, -- Fernando