[syslog-ng]file() syntax

[Christian Korschan]

On Mon, 1 Oct 2001, Nicholas Berry wrote:

> Just for background info, I compiled syslog-ng v1.5.9 under Solaris 8.
>
> I would like to make a statement similar to this:
> 	log { file("/var/log/$host/$year/$month"); };
> to write the log to "/var/log/ns01/2001/10".  I know this is possible by
> several filters, but that would be a ton of filters (especially since
> this will be breaking up at least 20 hosts).
>

I guess you have to use _uppercase_ characters for macros.

Here's how I accomplished this:

[1] Add create_dirs(yes) to global options
    Without creat_dirs set to yes syslog-ng will not be able to do what
    you want !

[2] Define sources

source local {
	sun-streams("/dev/log" door("/etc/.syslog_door"));
	internal(); };

[3] define _one_ destination using macros:

Example from my current syslog-ng.conf:

destination local_default   {
	file("/var/log/$YEAR/$MONTH/$DAY/$PROGRAM")
	owner(root)
	group(ics)
	perm(0640)
	dir_perm(0755)); };

... in your case
	file("/var/log/$HOST/$YEAR/$MONTH")
should do the job

[4] log to this destination

log { source(local); destination(local_default); };

use filters here if required

regards
-- 
Christian Korschan                   Systems Specialist CTBTO/IDC
Vienna International Centre   Email: Christian.Korschan@CTBTO.ORG
P.O. BOX 1200                             Phone: +43(1)26030 6184
A-1400 Vienna, Austria                      FAX: +43(1)26030 5932