[syslog-ng]Syslog-ng dies unexpectedly

[jmad]

I recently replaced my syslogd with syslog-ng on HP-UX 11.00.

It was running great for about a week.

I began adding more remote clients logging to it.

Within the last day or so now it dies without explaination every few
minutes (3-15min).  Where does syslog-ng default log to so I can try to
figure out what's going wrong (or have any of you had this and fixed
it)?

Also, I'm running a program that logs NT-events in syslog format and I
want to create a separate SINGLE "error" log from multiple machines.
What would the format for that be?  Does a simple filter and log match
statement work?

destination ntlog { file("/var/log/ntlog.log"); };
filter f_error { match("[ERR]"); };
#(  [ERR] is the common statement in the NT log statement for error
logs)

log { source(net); filter(f_error); destination(ntlog); };

Thanks for any help,
JonM
City of Evanston