Hello, Yes, you can do that with syslog-ng. As for the how, there is a cool description: https://www.syslog-ng.com/technical-documents/doc/syslog-ng-open-source-edit... For testing purposes I like to use *stdin* source, which reads from standard input device. -- Kokan On Sun, Mar 3, 2019 at 12:05 AM Lin, Victor <victor.lin@rbc.com> wrote:

Dear All,

Could you please let me know can I do this?

Would like to insert the following test syslog messages Feb 5 10:16:03 10.2.3.4 2019 Feb 5 15:16:03.560 UTC: %AUTHPRIV-5-SYSTEM_MSG: New user added with username victor - securityd Feb 5 10:16:03 10.2.3.4 2019 Feb 5 15:16:03.561 UTC: %AAA-6-AAA_ACCOUNTING_MESSAGE: update:10.24.3.46@pts/0:syslogtest:added user victor Feb 5 10:16:03 10.2.3.4 2019 Feb 5 15:16:03.561 UTC: %TACACS-6-TACACS_ACCOUNTING_MESSAGE: update: 10.24.3.46@pts/0: syslogtest: added user victor

to a local log file /MyApp/syslog-ng/output/test.log

Thank you so much for your help!

*VL*

_______________________________________________________________________

If you received this email in error, please advise the sender (by return email or otherwise) immediately. You have consented to receive the attached electronically at the above-noted email address; please retain a copy of this confirmation for future reference.

Si vous recevez ce courriel par erreur, veuillez en aviser l'expéditeur immédiatement, par retour de courriel ou par un autre moyen. Vous avez accepté de recevoir le(s) document(s) ci-joint(s) par voie électronique à l'adresse courriel indiquée ci-dessus; veuillez conserver une copie de cette confirmation pour les fins de reference future.

______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq