[syslog-ng]Splitting routerlogs from servers

Balazs Scheidler bazsi@balabit.hu
Thu, 28 Feb 2002 17:30:16 +0100


On Thu, Feb 28, 2002 at 05:18:43PM +0100, Michael Renner wrote:
> Hiya!
> 
> I've got a setup like this with many log hosts (~200, raising) and want to 
> split the server logfiles from those of our routers. i've got a setup like 
> this:
> []
> 
> This is a very ugly setup because i always have to add new servers to the 
> f_server filter, otherwise it would get logged in the router/unknown dir
> 
> Is there a better way to solve this with one ip address or should i add a 
> secondary interface to the server and let the routers log to the second ip?

what about logging to a different port?

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1