Hi, below are the few logs generated in my local machine. In that first 2 logs are generated through one application and last log generated through second application. But as you can see all logs have the originating source as the pc196070/pc196070 which is the last 5 digits of my machine's ip address. I want to differentiate the logs coming from different application!! How can it possible?? ..You suggest me program filter...So is that a solution??...if yes then please let me know how to use it exactly...I am blank in how to use it.. 05/Apr/2007 11:18:36 pc196070/pc196070 DEBUG: - [Thread- 62/Client-0] Response: RESP:0; 05/Apr/2007 11:18:36 pc196070/pc196070 Thread-62/Client-0] received: Enter command 05/Apr/2007 11:18:36 pc196070/pc196070 INFO: -NpiListener.Listener - Port 12346 successfully opened. Waiting for connecti... Thank you. B.R. Ash. --------------------------------- From: syslog-ng-bounces@lists.balabit.hu on behalf of Geller, Sandor (IT) Sent: Wed 4/4/2007 11:37 AM To: Syslog-ng users' and developers' mailing list Subject: RE: [syslog-ng] More then one application on same server > Hi,

Thank you very much for your reply. But as I am new in this so can you please be more specific that how can I use the Program() filter?? Let me again tell you my specific issue- I have a Tomcat server running and in that server I have 3 application or nodes that generates the logs and dump into tomcat server....Now when I use the syslog it gives me all the logs mix with the generating source name as the hostname (tomcat server)....but I want that syslog should give me the logs which has the field in it from which I can identify that this log is generated in this application and this is in other... So I hope I describe the problem to give you exact idea!! I will be thankful to you if you help me in this.

Could you show some lines from your log originating from different programs? I'm not familiar with tomcat, so I don't understand your issue exactly... Maybe the logs have a field which could be used to differentiate between your tomcat apps. Regards, Sandor -------------------------------------------------------- NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error. _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html --------------------------------- Here’s a new way to find what you're looking for - Yahoo! Answers