RE: [syslog-ng]centralized syslog-server.
source s_send { udp(); internal(); }; ** This will only pick up messages from a udp source or internal. **Probably not too many since you are not actually sending any messages to this host.
destination d_send { udp("192.168.80.94"); };
filter f_send { level(info); };
log { source(s_send); filter(f_send); destination(d_send); };
ok.. So my host-config only pushes out the syslog-messages that spesifies that it wants to be sent to the remote host? Then my question is, how should I configure the host to send out all messages generated, to a remote syslog-server? -- I also spotted that i wrote the log-entry wrong in my previous mail: source crusher-1 { udp(); internal(); };
destination d_crusher-1 { file("/var/log/crusher-1"); };
filter f_crusher-1 { host("192.168.80.141"); }
log { source(local); filter(f_filter2); destination(d_mesg); };
log { source(s_crusher-1); filter(f_crusher-1); destination(d_crusher-1); }; ## Is right :) /J
On Wed, Dec 04, 2002 at 04:04:08PM +0100, Jon Hofstad wrote:
So my host-config only pushes out the syslog-messages that spesifies that it wants to be sent to the remote host?
Then my question is, how should I configure the host to send out all messages generated, to a remote syslog-server?
# set up logging to loghost destination loghost { udp("10.0.0.1" port(514)); }; # send everything to loghost, too log { source(src); destination(loghost); }; -- Nate Campi http://www.campin.net To sysadmin or not to sysadmin... that is the question, whether tis nobler in the minde to suffer the slings and arrowes of outragious fortune, or climb to the top of the building with a high-power rifle and scope.
participants (2)
-
Jon Hofstad
-
Nate Campi