[syslog-ng]All messages logging to all files
Brian Foran
syslog-ng@lists.balabit.hu
Tue, 29 Jul 2003 11:32:09 -0700
This is a multi-part message in MIME format.
------_=_NextPart_001_01C355FF.B8A92F8B
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hello
I am having a problem where anytime I point a new host to my Syslog-ng =
server, it seems to write to all logfiles located in the syslog-ng.conf =
file. Thanks for your response in advance.
Here is my configuration file:
options { sync (0);
time_reopen (10);
log_fifo_size (1000);
check_hostname(yes);
long_hostnames (off);
use_dns (yes);
use_fqdn (yes);
create_dirs (yes);
keep_hostname (yes);
};
filter f_borderpix { host("525edgepixpair") or match ("*.*.*.*"); };
destination d_borderpix { =
file("/var/log/logfiles/borderpix/borderpix.log"); };
log { source(s_net); destination(d_borderpix); };
filter f_stelt_hurricane { host("hurricane") or match ("*.*.*.*"); };
destination d_stelt_hurricane { =
file("/var/log/logfiles/stelt/hurricane.log"); };
log { source(s_net); destination(d_stelt_hurricane); };
filter f_stelt_cyclone { host("cyclone") or match ("*.*.*.*"); };
destination d_stelt_cyclone { =
file("/var/log/logfiles/stelt/cyclone.log"); };
log { source(s_net); destination(d_stelt_cyclone); };
Thanks,
Brian
------_=_NextPart_001_01C355FF.B8A92F8B
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
6.0.6396.0">
<TITLE>All messages logging to all files</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=3D2 FACE=3D"Arial">Hello</FONT>
</P>
<P><FONT SIZE=3D2 FACE=3D"Arial">I am having a problem where anytime I =
point a new host to my Syslog-ng server, it seems to write to all =
logfiles located in the syslog-ng.conf file. Thanks for your =
response in advance.</FONT></P>
<P><FONT SIZE=3D2 FACE=3D"Arial">Here is my configuration file:</FONT>
</P>
<BR>
<P><FONT SIZE=3D2 FACE=3D"Courier New">options { sync (0);</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier =
New"> time_reopen =
(10);</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier =
New"> =
log_fifo_size (1000);</FONT>
<BR> <FONT SIZE=3D2 =
FACE=3D"Courier New"> check_hostname(yes);</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier =
New"> =
long_hostnames (off);</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier =
New"> use_dns =
(yes);</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier =
New"> use_fqdn =
(yes);</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier =
New"> create_dirs =
(yes);</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier =
New"> =
keep_hostname (yes);</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier =
New"> };</FONT>
</P>
<BR>
<P><FONT SIZE=3D2 FACE=3D"Courier New">filter =
f_borderpix { =
host("525edgepixpair") or match ("*.*.*.*"); =
};</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier New">destination d_borderpix { =
file("/var/log/logfiles/borderpix/borderpix.log"); };</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier New">log { source(s_net); =
destination(d_borderpix); };</FONT>
</P>
<P><FONT SIZE=3D2 FACE=3D"Courier New">filter =
f_stelt_hurricane { =
host("hurricane") or match ("*.*.*.*"); };</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier New">destination =
d_stelt_hurricane { =
file("/var/log/logfiles/stelt/hurricane.log"); };</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier New">log { source(s_net); =
destination(d_stelt_hurricane); };</FONT>
</P>
<BR>
<P><FONT SIZE=3D2 FACE=3D"Courier New">filter f_stelt_cyclone =
{ host("cyclone") =
or match ("*.*.*.*"); };</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier New">destination =
d_stelt_cyclone { =
file("/var/log/logfiles/stelt/cyclone.log"); };</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Courier New">log { source(s_net); =
destination(d_stelt_cyclone); };</FONT>
</P>
<P><FONT SIZE=3D2 FACE=3D"Courier New">Thanks,</FONT>
</P>
<P><FONT SIZE=3D2 FACE=3D"Courier New">Brian</FONT>
</P>
</BODY>
</HTML>
------_=_NextPart_001_01C355FF.B8A92F8B--