[syslog-ng] help for windows logging

[antonio]

Hallo,

I'm trying to configure syslog-ng to log windows client, i downloaded and
installed snare agent and I added the following to the conf file:

filter windows {
program(MSWinEventLog);
};
destination windows {
file("/var/log/archive/windows/$R_YEAR/$R_MONTH/$R_YEAR-$R_MONTH-$R_DAY"
template("$ISODATE <$FACILITY.$PRIORITY> $HOST $MSG\n")
template_escape(no)
);
};
log {
source(local); filter(windows); destination(windows);
flags(final);
};


when i type syslog-ng -f /etc/syslog-nf.conf

i get this error message:


# syslog-ng -f /etc/syslog-ng.conf
unresolved reference: local

thank in advance for your help

bye
antonio