[syslog-ng]Trying to send log over network

Simeon Johnston simeonuj@eetc.com
Tue, 13 Feb 2001 20:53:09 -0600


I am trying to send logs over our network but am having trouble with the
rules.  I have set up a host to accept the logs and I am trying to set
up the sender.  This is the destination rule so far.

destination d_bg { tcp(ip(192.168.1.19) port(514)); };

When I try to start syslog-ng it gives me this error.

parse error at 31
Parse error reading configuration file, exiting.

Line 31 is the above rule.  This is the complete config of syslog-ng so
far.

options { sync (0);
          time_reopen (10);
          log_fifo_size (1000);
          long_hostnames (on);
          use_dns (no);
          use_fqdn (no);
          create_dirs (yes);
          keep_hostname (yes);
        };

source s_sys { unix-stream ("/dev/log"); internal(); };

destination d_cons { file("/var/log/ng/kern.log"); };
destination d_mesg { file("/var/log/ng/messages"); };
destination d_auth { file("/var/log/ng/secure"); };
destination d_mail { file("/var/log/ng/maillog"); };
destination d_spol { file("/var/log/ng/spooler"); };
destination d_boot { file("/var/log/ng/boot.log"); };
destination d_mlal { file("/var/log/ng/emerg.log"); };
destination d_dhcp { file("/var/log/ng/dhcpd.log"); };
destination d_ipchains { file("/var/log/ng/ipchains.log"); };
destination d_bg { tcp(ip(192.168.1.19) port(514)); };

filter f_filter1     { facility(kern); };
filter f_filter2     { level(info); };
filter f_filter3     { facility(authpriv); };
filter f_filter4     { facility(mail); };
filter f_filter5     { level(emerg); };
filter f_filter6     { facility(uucp) or
                     (facility(news) and level(crit)); };
filter f_dhcp        { match("dhcpd"); };
filter f_ipchains    { match("ipchains"); };
filter f_tcplog      { level(debug); };

log { source(s_sys); filter(f_filter1); destination(d_cons); };
log { source(s_sys); filter(f_filter2); destination(d_mesg); };
log { source(s_sys); filter(f_filter3); destination(d_auth); };
log { source(s_sys); filter(f_filter4); destination(d_mail); };
log { source(s_sys); filter(f_filter5); destination(d_mlal); };
log { source(s_sys); filter(f_filter6); destination(d_spol); };
log { source(s_sys); filter(f_dhcp); destination(d_dhcp); };
log { source(s_sys); filter(f_ipchains); destination(d_ipchains); };
log { source(s_sys); filter(f_tcplog); destination(d_bg); };

Any help would be appreciated.

sim