[syslog-ng]Is my default location broken?

Balazs Scheidler syslog-ng@lists.balabit.hu
Thu, 19 Feb 2004 08:12:00 +0100


2004-02-18, sze keltezéssel 19:40-kor Madziarczyk, Jonathan ezt írta:
> I just migrated to a new box for syslog-ng and I'm trying to get the
> "default" location to work for messages that don't meet any of my rules
> yet.
> 
> I've sent multiple syslog messages to the box but they don't seem to be
> showing up.  Any ideas? I do know that the "rules" messages are working
> so udp is binding.
> 
> Thanks,
> JonM
> 
> options { dir_perm(0755); perm(0644); chain_hostnames(no);
>           time_reopen (10);
>           log_fifo_size (1000);
>           long_hostnames (off);
>           use_dns (yes);
>           use_fqdn (no);
>           dns_cache (yes);
>           create_dirs (yes);
>           keep_hostname(yes); };
> 
> source local { unix-dgram("/dev/log"); internal(); };
> 
> source s_udpmessages { udp(ip(0.0.0.0) port(514)); };
> 
> destination unsorted    { file("/logs/unsorted.log" perm(0777)); };
> log { source(s_udpmessages); destination(unsorted); flags(final,
> fallback); };

what are those 'rules' messages you are referring to? try stracing the
syslog-ng process to see whether it actually receives messages.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1