I haven't looked at the docs recently but it is my understanding, and someone here can point it out if I am wrong, but match is used for matching on the message part of the log line. It doesn't match on the host. Instead use filter cisco-ubr2 { host("192.168.1.2); }; Regards, Drew

-----Original Message----- From: Brian E. Seppanen [SMTP:seppy@chartermi.net] Sent: Friday, February 23, 2001 2:08 AM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng]Destination Not Working

I have several routers set up to log to a central host. All of them work without issue. I have the following destination, set up.

destination blah.cisco { file("/var/log/cisco/blah-cisco.$PRIORITY" owner("admin") group("apache") perm(0640));};

and the following filter

filter cisco-ubr2 { match("192.168.1.2");};

Which is supposed to log as follows

log { source(udp_src); filter(cisco-ubr2); destination(blah.cisco);};

I get no errors, but the following is logging to /var/log/messages which is my default.

Feb 22 13:50:05 192.168.1.2 120: 00:18:04: %UBR7200-5-UNREGSIDTIMEOUT:

the udp_src is working for every other router, as are the filters and destinations. This is the only one that isn't working.

This one has confused me for some time, any ideas greatly appreciated.

Brian Seppanen Charter Communications Regional Data Center 906-228-4226 ext 23 Marquette, MI seppy@chartermi.net

_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng