[syslog-ng]Splitting routerlogs from servers

[Gregor Binder]

Michael Renner on Thu, Feb 28, 2002 at 05:18:43PM +0100:

Hi,

> This is a very ugly setup because i always have to add new servers to the 
> f_server filter, otherwise it would get logged in the router/unknown dir
> 
> Is there a better way to solve this with one ip address or should i add a 
> secondary interface to the server and let the routers log to the second ip?

if you have the option to add an IP-alias to the existing interface, I
guess this would be the best way to go. Otherwise, if you run syslog-ng
on your servers as well, you could make them log to another port.

In both cases, you would define two different network sources.

Regards,

-- 
 ____ ____ 
/  _/| -  >  Gregor Binder <gb@(rootnexus.net|sysfive.com)>
| / || _\ \
\__ Id: 0xE2F31C4B Fp: 8B8A 5CE3 B79B FBF1 5518 8871 0EFB AFA3 E2F3 1C4B