This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C1D695.923A25C0 Content-Type: text/plain; charset="iso-8859-1" Are you still having problems? I have my pixen logging, I might be able to help. -----Original Message----- From: Steve [mailto:steve_slog_ml@timko.com] Sent: Thursday, March 28, 2002 1:49 PM To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng]syslog-ng pix help ok now I got pix.log file collecting info but It seems the pix is sending syslog out to err so messages and console is still logging everything which is ugly.. what am I donig wrong? I tried filter f_not_pix { host(regexp to match host); }; that didn't work.. -steve On Thu, 28 Mar 2002, Steve wrote: > ok I got logging in debug mode working on the pix but now everything is > coming to console and messages.. > > I'm trying to get it just to log to pix.log filename.. > > nothing there.. > > -s > > > On Thu, 28 Mar 2002, Steve wrote: > > > Hello, > > > > I saw this post: > > > > http://lists.balabit.hu/pipermail/syslog-ng/2001-November/002760.html > > > > and I'm kinda having a simular problem, but I can't even get logging to > > work. At one point I had the pix logs going to console... > > > > > > Now I got nothing.. > > > > Heres what I got in syslog-ng.conf > > > > destination pix { file("/var/log/pix.log"); }; > > # > > # host filters > > # > > filter f_pix { host(10.1.5.3); }; > > log { source(src); filter(f_pix); destination(pix); }; > > > > > > Does it matter where you put this lines? > > > > thanks for the help if u can.. > > > > > > oh yea > > > > pix has this enabled: > > > > pixfirewall# show loggi > > Syslog logging: enabled > > Timestamp logging: disabled > > Standby logging: disabled > > Console logging: disabled > > Monitor logging: disabled > > Buffer logging: disabled > > Trap logging: disabled > > History logging: disabled > > > > along with > > > > ogging on > > no logging timestamp > > no logging standby > > no logging console > > no logging monitor > > no logging buffered > > no logging trap > > no logging history > > logging facility 20 > > logging queue 512 > > logging host inside 10.1.5.222 > > > > > > > > thanks for any help > > > > -steve > > > > > > > > _______________________________________________ > > syslog-ng maillist - syslog-ng@lists.balabit.hu > > https://lists.balabit.hu/mailman/listinfo/syslog-ng > > > > > _______________________________________________ > syslog-ng maillist - syslog-ng@lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/syslog-ng > _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng ------_=_NextPart_001_01C1D695.923A25C0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">RE: [syslog-ng]syslog-ng pix help Are you still having problems? I have my pixen = logging, I might be able to help.
-----Original Message-----
From: Steve [mailto:steve_slog_ml@timko.com= A>]
Sent: Thursday, March 28, 2002 1:49 PM
To: syslog-ng@lists.balabit.hu
Subject: Re: [syslog-ng]syslog-ng pix help
ok now I got pix.log file collecting info
but
It seems the pix is sending syslog out to err so = messages and console is
still logging everything which is ugly..what am I donig wrong?
I tried filter f_not_pix { host(regexp to match = host); };
that didn't work..
-steve
On Thu, 28 Mar 2002, Steve wrote:
> ok I got logging in debug mode working on the = pix but now
everything is
> coming to console and messages..
>
> I'm trying to get it just to log to pix.log = filename..
>
> nothing there..
>
> -s
>
>
> On Thu, 28 Mar 2002, Steve wrote:
>
> > Hello,
> >
> > I saw this post:
> >
> >
http://lists.balabit.hu/pipermail/syslog-ng/2001-Novem= ber/002760.html
> >
> > and I'm kinda having a simular problem, = but I can't even
get logging to
> > work. At one point I had the pix = logs going to console...
> >
> >
> > Now I got nothing..
> >
> > Heres what I got in syslog-ng.conf
> >
> > destination pix { = file("/var/log/pix.log"); };
> > #
> > # host filters
> > #
> > filter f_pix { host(10.1.5.3); };
> > log { source(src); filter(f_pix); = destination(pix); };
> >
> >
> > Does it matter where you put this = lines?
> >
> > thanks for the help if u can..
> >
> >
> > oh yea
> >
> > pix has this enabled:
> >
> > pixfirewall# show loggi
> > Syslog logging: enabled
> > Timestamp logging: = disabled
> > Standby logging: = disabled
> > Console logging: = disabled
> > Monitor logging: = disabled
> > Buffer logging: = disabled
> > Trap logging: = disabled
> > History logging: = disabled
> >
> > along with
> >
> > ogging on
> > no logging timestamp
> > no logging standby
> > no logging console
> > no logging monitor
> > no logging buffered
> > no logging trap
> > no logging history
> > logging facility 20
> > logging queue 512
> > logging host inside 10.1.5.222
> >
> >
> >
> > thanks for any help
> >
> > -steve
> >
> >
> >
> > = _______________________________________________
> > syslog-ng maillist - = syslog-ng@lists.balabit.hu
> > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
>
>
> = _______________________________________________
> syslog-ng maillist - = syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
>
_______________________________________________
------_=_NextPart_001_01C1D695.923A25C0--
syslog-ng maillist - = syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng