[syslog-ng]dest. tcp and dest. pipe on HPUX

Stephan Hendl syslog-ng@lists.balabit.hu
Tue, 22 Jun 2004 15:47:42 +0200


Hi,

I use the syslog-ng-1.6.0rc4 on HPUX 11 and try to send the syslog data
to a tcp-destination (is a ssh tunnel to a central syslog-server) as
well as to a pipe. Unfortunately the syslog-ng creates the pipe but logs
only to the tcp destination and _not_ to the pipe as well.

Do you have any ideas?

Stephan

--------------------------------
# syslog-ng configuration file.
#
# This should behave pretty much like the original syslog on HP-UX.
But
# it could be configured a lot smarter.
#
# See syslog-ng(8) and syslog-ng.conf(8) for more information.
#
# 20000925 gb@sysfive.com 

options { sync (0);
          time_reopen (10);
          log_fifo_size (20000);
          long_hostnames (off);
          use_dns (no);
          use_fqdn (no);
          create_dirs (yes);
          keep_hostname (yes);
        };

source s_sys { pipe("/dev/log" pad_size(2048)); internal(); };

source s_pns1_tcp { tcp(ip(194.76.232.136) port(10514)
max-connections(20)); };

destination d_syslog_tcp {
  tcp("localhost"
  port(10514));
};

destination d_cic {
  pipe("/tmp/cic.pipe"
  owner("root")
  group("root")
  perm(0640)
  template( "$DATE $HOST $PRIORITY [$FACILITY] $MESSAGE\n")
template-escape(yes));
};

destination d_syslog { file("/var/adm/syslog/syslog.log" owner("root")
group("sys") perm(0644)); };
destination d_console { file("/dev/console"); };
destination d_root    { usertty("root"); };
destination d_all     { usertty("*"); };
destination d_auth    { file("/var/adm/syslog/auth"); };
destination d_user    {
file("/var/adm/syslog/user/log.$YEAR$MONTH$DAY"); };
destination d_mailerr {
file("/var/adm/syslog/mailerr/log.$YEAR$MONTH$DAY"); };
destination d_mail    { file("/var/adm/syslog/mail/log.$YEAR$MONTH$DAY"
owner("root") group("mailadm") perm(0440)); };

filter f_syslog  { not facility(mail); };
filter f_auth    { (not facility(mail) and level(alert)) or
(facility(auth) and level(warning)); };
filter f_filter1 { not facility(mail) and level(alert); };
filter f_filter2 { level(emerg); };
filter f_filter3 { facility(user) and level(info); };
filter f_mailerr { facility(mail) and not level(info); };
filter f_mail    { facility(mail); };

log { source(s_pns1_tcp); destination(d_syslog_tcp); };
log { source(s_sys); destination(d_syslog_tcp); };

log { source(s_pns1_tcp); destination(d_cic); };
log { source(s_sys); destination(d_cic); };

log { source(s_sys); filter(f_syslog);  destination(d_syslog); };
log { source(s_sys); filter(f_auth);    destination(d_auth); };
log { source(s_sys); filter(f_filter1); destination(d_console);
destination(d_root); };
log { source(s_sys); filter(f_filter2); destination(d_all); };
log { source(s_sys); filter(f_filter3); destination(d_user); };
log { source(s_sys); filter(f_mailerr); destination(d_mailerr); };
log { source(s_sys); filter(f_mail);    destination(d_mail); };