[syslog-ng]config questions

[MagerValp]

>>>>> "AF" == Andrew Fort <afort@staff.webcentral.com.au> writes:

MV> I also vaguely remember someone mentioning a way of outputting all
MV> the log messages that don't get caught by any filter rules to a
MV> file. Anyone know what I'm talking about? It's basically to check
MV> that I'm not missing anything important with my current config.

AF> yep, there is a predefined filter named "DEFAULT" which should do
AF> what you're after.

Ah, you're quite right. Though

  destination default { file("/var/log/default-$YEAR$MONTH$DAY"); };
  log { source(src); filter(DEFAULT); destination(default); };

doesn't seem to work, no file is created. Any ideas?

-- 
    ___          .     .  .         .       . +  .         .      o   
  _|___|_   +   .  +     .     +         .   .  Per Olofsson, konstnär
    o-o    .      .     .   o         +          MagerValp@cling.gu.se
     -       +            +    .     http://www.cling.gu.se/~cl3polof/