[syslog-ng]logging to a central server

[Ed Ravin]

Stephen C Burns writes:
> How exactly would one configure a host, so that it 
> sends all logs to a central syslog-ng machine?

In the client's syslog-ng.conf:

   destination central {
           tcp("loghost.my.example.com" port(NNN));
   };

Where NNN is the port number your central server is listening on.

Over at the central server, you need to define the source:

   source src {
           tcp(port(NNN) max-connections(500));
           internal();
   };

You might want to put in other sources, such as local syslog
messages or kernel messages.  See the documentation for more
description of the source and destination directives.