[syslog-ng]syslog-ng pix help

John Coke jcoke@ibeam.com
Thu, 28 Mar 2002 14:17:23 -0600


This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C1D695.923A25C0
Content-Type: text/plain;
	charset="iso-8859-1"

Are you still having problems?  I have my pixen logging, I might be able to
help.

-----Original Message-----
From: Steve [mailto:steve_slog_ml@timko.com]
Sent: Thursday, March 28, 2002 1:49 PM
To: syslog-ng@lists.balabit.hu
Subject: Re: [syslog-ng]syslog-ng pix help


ok now I got pix.log file collecting info

but

It seems the pix is sending syslog out to err so messages and console is
still logging everything which is ugly..

what am I donig wrong?

I tried filter f_not_pix { host(regexp to match host); };

that didn't work..

-steve


On Thu, 28 Mar 2002, Steve wrote:

> ok I got logging in debug mode working on the pix but now 
everything is
> coming to console and messages..
> 
> I'm trying to get it just to log to pix.log filename..
> 
> nothing there..
> 
> -s
> 
> 
> On Thu, 28 Mar 2002, Steve wrote:
> 
> > Hello,
> > 
> > I saw this post:
> > 
> > 
http://lists.balabit.hu/pipermail/syslog-ng/2001-November/002760.html
> > 
> > and I'm kinda having a simular problem, but I can't even 
get logging to
> > work.  At one point I had the pix logs going to console...
> > 
> > 
> > Now I got nothing..
> > 
> > Heres what I got in syslog-ng.conf
> > 
> > destination pix { file("/var/log/pix.log"); };
> > #
> > # host filters
> > # 
> > filter f_pix { host(10.1.5.3); };
> > log { source(src); filter(f_pix); destination(pix); };
> > 
> > 
> > Does it matter where you put this lines?
> > 
> > thanks for the help if u can..
> > 
> > 
> > oh yea
> > 
> > pix has this enabled:
> > 
> > pixfirewall# show loggi  
> > Syslog logging: enabled
> >     Timestamp logging: disabled
> >     Standby logging: disabled
> >     Console logging: disabled
> >     Monitor logging: disabled
> >     Buffer logging: disabled
> >     Trap logging: disabled
> >     History logging: disabled
> > 
> > along with
> > 
> > ogging on
> > no logging timestamp
> > no logging standby
> > no logging console
> > no logging monitor
> > no logging buffered
> > no logging trap
> > no logging history
> > logging facility 20
> > logging queue 512
> > logging host inside 10.1.5.222
> > 
> > 
> > 
> > thanks for any help
> > 
> > -steve
> > 
> > 
> > 
> > _______________________________________________
> > syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > 
> 
> 
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> 


_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng

------_=_NextPart_001_01C1D695.923A25C0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">



RE: [syslog-ng]syslog-ng pix help



Are you still having problems?  I have my pixen = logging, I might be able to help.

-----Original Message-----
From: Steve [mailto:steve_slog_ml@timko.com]
Sent: Thursday, March 28, 2002 1:49 PM
To: syslog-ng@lists.balabit.hu
Subject: Re: [syslog-ng]syslog-ng pix help


ok now I got pix.log file collecting info

but

It seems the pix is sending syslog out to err so = messages and console is
still logging everything which is ugly..

what am I donig wrong?

I tried filter f_not_pix { host(regexp to match = host); };

that didn't work..

-steve


On Thu, 28 Mar 2002, Steve wrote:

> ok I got logging in debug mode working on the = pix but now
everything is
> coming to console and messages..
>
> I'm trying to get it just to log to pix.log = filename..
>
> nothing there..
>
> -s
>
>
> On Thu, 28 Mar 2002, Steve wrote:
>
> > Hello,
> >
> > I saw this post:
> >
> >
http://lists.balabit.hu/pipermail/syslog-ng/2001-Novem= ber/002760.html
> >
> > and I'm kinda having a simular problem, = but I can't even
get logging to
> > work.  At one point I had the pix = logs going to console...
> >
> >
> > Now I got nothing..
> >
> > Heres what I got in syslog-ng.conf
> >
> > destination pix { = file("/var/log/pix.log"); };
> > #
> > # host filters
> > #
> > filter f_pix { host(10.1.5.3); };
> > log { source(src); filter(f_pix); = destination(pix); };
> >
> >
> > Does it matter where you put this = lines?
> >
> > thanks for the help if u can..
> >
> >
> > oh yea
> >
> > pix has this enabled:
> >
> > pixfirewall# show loggi 
> > Syslog logging: enabled
> >     Timestamp logging: = disabled
> >     Standby logging: = disabled
> >     Console logging: = disabled
> >     Monitor logging: = disabled
> >     Buffer logging: = disabled
> >     Trap logging: = disabled
> >     History logging: = disabled
> >
> > along with
> >
> > ogging on
> > no logging timestamp
> > no logging standby
> > no logging console
> > no logging monitor
> > no logging buffered
> > no logging trap
> > no logging history
> > logging facility 20
> > logging queue 512
> > logging host inside 10.1.5.222
> >
> >
> >
> > thanks for any help
> >
> > -steve
> >
> >
> >
> > = _______________________________________________
> > syslog-ng maillist  -  = syslog-ng@lists.balabit.hu
> > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
>
>
> = _______________________________________________
> syslog-ng maillist  -  = syslog-ng@lists.balabit.hu
>
https://lists.balabit.hu/mailman/listinfo/syslog-ng
>


_______________________________________________
syslog-ng maillist  -  = syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng

------_=_NextPart_001_01C1D695.923A25C0--