Hi All, We've got a linux client running syslog-ng 1.6 sending to a linux server running syslog-ng 1.5.17 For the client I have taken the example redhat conf file and added the following to it: destination loghost { tcp("myloghost.fq.dn" port(514)); }; filter f_filter9 { level(notice); }; log { source(s_sys); filter(f_filter9); destination(loghost); }; If I use logger to test I see the message come thru: logger -p kern.notice -t WARNING "This is a KERNEL test warning" However, if I do: logger -p kern.emerg -t WARNING "This is a KERNEL test warning" Nothing comes thru. Do I need to specify multiple prioity levels? I want anything of notice or higher to be sent to the syslog server. Any help is greatly appreciated. TIA, Harry -- Harry Hoffman ITSS Systems Team Leader University of Auckland hhoffman@auckland.ac.nz hhoffman@ip-solutions.net STANDARD DISCLAIMER: ********************************************** *This universe shipped by weight, not volume.* *Some expansion may have occured in shipping.* ********************************************* ------------------------------------------------- This mail sent through IpSolutions: http://www.ip-solutions.net/
Harry Hoffman said:
Hi All,
We've got a linux client running syslog-ng 1.6 sending to a linux server running syslog-ng 1.5.17
For the client I have taken the example redhat conf file and added the following to it: destination loghost { tcp("myloghost.fq.dn" port(514)); }; filter f_filter9 { level(notice); };
try filter f_filter9 { level(notice..emerg); }; nate
Nate, Your the man! Thanks very much. Cheers, Harry Quoting nate <syslog-ng@aphroland.org>: *> Harry Hoffman said: *> > Hi All, *> > *> > We've got a linux client running syslog-ng 1.6 sending to a linux server *> > running syslog-ng 1.5.17 *> > *> > For the client I have taken the example redhat conf file and added the *> > following to it: *> > destination loghost { tcp("myloghost.fq.dn" port(514)); }; *> > filter f_filter9 { level(notice); }; *> *> try *> *> filter f_filter9 { level(notice..emerg); }; *> *> nate *> *> *> *> _______________________________________________ *> syslog-ng maillist - syslog-ng@lists.balabit.hu *> https://lists.balabit.hu/mailman/listinfo/syslog-ng *> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html *> *> -- Harry Hoffman ITSS Systems Team Leader University of Auckland hhoffman@auckland.ac.nz hhoffman@ip-solutions.net STANDARD DISCLAIMER: ********************************************** *This universe shipped by weight, not volume.* *Some expansion may have occured in shipping.* ********************************************* ------------------------------------------------- This mail sent through IpSolutions: http://www.ip-solutions.net/
participants (2)
-
Harry Hoffman
-
nate