[syslog-ng]config questions

[Andrew Fort]

> AF> yep, there is a predefined filter named "DEFAULT" which should do
> AF> what you're after.
> 
> Ah, you're quite right. Though
> 
>   destination default { file("/var/log/default-$YEAR$MONTH$DAY"); };
>   log { source(src); filter(DEFAULT); destination(default); };
> 
> doesn't seem to work, no file is created. Any ideas?

Are any messages from source(src) making it to the default filter?  If not,
no file will ever be created. 

Find a situation your other rules dont cater for (an unusual facility, for
instance), and use 'logger' to create log messages to see if the problem is
syslog-ng or simply you dont have any 'extra' messages which need catching
by a default rule.

--
afort