[syslog-ng]multiple listen port for centralized syslog-ng

[Ed Ravin]

On Fri, Jan 23, 2004 at 05:14:41PM +0100, Alessandro Fiorenzi wrote:
> Hi, I would like to setup a very customized version centralize
> syslog-ng.
... 
> for wich I would like to have multiple istance of syslog-ng listening
> each one on different port like:
> 
> - General Porpouse Server: port 10000
> - IDS 			 : port 10001
> - Firewall 		 : port 10002

You don't need multiple instances of syslog-ng - you would do something
like this in the config file:

  source general {
	udp(port(10000));
  }

  source ids {
	udp(port 10001));
  }

  source firewall {
	udp(port 10002));
  }

And then process them separately as far as destinations, filtering, or
whatever else you want to do.