multiple listen port for centralized syslog-ng
Hi, I would like to setup a very customized version centralize syslog-ng. I would like to divide out server into tree areas - General Porpouse Server - IDS - Firewall for wich I would like to have multiple istance of syslog-ng listening each one on different port like: - General Porpouse Server: port 10000 - IDS : port 10001 - Firewall : port 10002 Is it possible to do? or how can I do to distinguish ? Thanks
On Fri, Jan 23, 2004 at 05:14:41PM +0100, Alessandro Fiorenzi wrote:
Hi, I would like to setup a very customized version centralize syslog-ng. ... for wich I would like to have multiple istance of syslog-ng listening each one on different port like:
- General Porpouse Server: port 10000 - IDS : port 10001 - Firewall : port 10002
You don't need multiple instances of syslog-ng - you would do something like this in the config file: source general { udp(port(10000)); } source ids { udp(port 10001)); } source firewall { udp(port 10002)); } And then process them separately as far as destinations, filtering, or whatever else you want to do.
participants (2)
-
Alessandro Fiorenzi
-
Ed Ravin