[syslog-ng] netmask

[Werner Thal]

Thank you for your feedback!

But today I solved the problem and shame on me, it was not a failure
of syslog-ng. I've discovered a hard to find copy/paste error in the config
file. The log object of interest has had a wrong source entry. So nothing
has been logged because nothing of interest comes from the chosen source.

So sorry for bothering the list with that.

Kind Regards
Werner

Am Dienstag, 22. August 2006 18:10 schrieb Donald Rush:
> Thank you for your input.  I am not having an issue with getting the
> logs from different devices into different log files.  What is happening
> is that in the standard config with the Suse syslog-ng.conf file, it
> logs all messages in one file, which I would like to keep, but I would
> like to exclude anything from a remote system.  You might be telling me
> below, but I don't seem to be getting it.  Below is out of the
> syslog-ng.conf, what I would like to do is filter out any remote system
> from that.
>
> filter f_messages   { not facility(news, mail) and not
> filter(f_iptables); };
>
> #
> # All messages except iptables and the facilities news and mail:
> #
> destination messages { file("/var/log/messages"); };
> log { source(src); filter(f_messages); destination(messages); };
>
> -----Original Message-----
> From: syslog-ng-bounces at lists.balabit.hu
> [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Werner Thal
> Sent: Tuesday, August 22, 2006 5:59 AM
> To: syslog-ng at lists.balabit.hu
> Subject: [syslog-ng] netmask
>
> Hallo,
>
> I try to use the "netmask" filter option to generate seperate logfiles
> for different subnets.
> I tried
> 	this 		filter krzn_all {
> netmask("10.254.0.0/255.255.0.0"); };
> 	this 		filter krzn_all {
> netmask(10.254.0.0/255.255.0.0); };
> 	this 		filter krzn_all { netmask("10.254.0.0/16"); };
> and	this 		filter krzn_all { netmask(10.254.0.0/16); };
>
> No errors have been reported starting syslog-ng but also no messages
> have been logged.
>
> I use syslog-ng 2.0rc1-2 on a debian Etch.
>
> Kind Regards
> W. Thal
>
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
>
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html