[syslog-ng]remote logging and logfile naming

Christian Hammers ch@westend.com
Tue, 5 Mar 2002 11:31:24 +0100


Hello

I like to have the following logfile names:
	/var/log/remote/proxy.d.westend.com.2002-03-05.log
	or at least
	/var/log/remote/212.117.2.4.2002-03-05.log
	/var/log/remote/212.117.4.5.2002-03-05.log
	etc.	
Strangely, now I have a file
	/var/log/remote/proxy.2002-03-05.log
which contains data from both, proxy.d.westend.com and proxy.westend.com.

And, in addition, when trying to turn of hostname lookup, all syslog-ng 
exporters still have filenames with their short hostnames and all syslog
(old) exporters have IPs as hostnames!
	/var/log/remote/proxy.2002-03-05
	/var/log/remote/212.117.77.123.2002-03-05
(of course I restarted the server after each modification)

On all three syslog-ng hosts (2xProxy and 1xCollector) I use 
syslog-ng-1.5.13.  My collector config looks like this:

options {
        long_hostnames(on);
        use_dns(no);
        use_fqdn(on);
        keep_hostname(on)
        chain_hostnames(on);

        use_time_recvd(yes);
        sync(0);
        mark(120);
        log_fifo_size(1000);
};
source remote { udp(); tcp(); };
destination westend_remote_hosts_dir { file("/var/log/remote/$HOST.$YE.....

Any ideas, how to archive "proxy.d.westend.com.2002-03-05.log"? The content
of the files is uninteresting, although chained hostnames would be nice
if I ever log over more than one host.

bye,

-christian-

-- 
Christian Hammers    WESTEND GmbH - Aachen und Dueren     Tel 0241/701333-0
ch@westend.com     Internet & Security for Professionals    Fax 0241/911879
           WESTEND ist CISCO Systems Partner - Premium Certified