[syslog-ng] Remote SYSLOG-NG logging - can't log from remote

rlubbers at sysctl.net rlubbers at sysctl.net
Wed May 3 00:24:27 CEST 2006




I am at my wits end with this.  Some devices are logging remotely, but others
are not.  I can see the packets arrive on UDP port 514 using tcpdump, but the
packets don't get recorded in the proper file.  I have tried nearly
everything, and I am certain I am doing something silly, but maybe you can
help out.

Here is my syslog-ng.conf.file:

*************************************************************

source local {
        unix-dgram("/var/run/log");
        udp(ip(0.0.0.0) port(514));
        internal();
};

### SECURITY LOG  -  This logs

filter f_9 {
        facility(security) and level(debug..emerg);
};

destination d_3 {
        file("/var/log/security" create_dirs(yes));
};

log { source(local); filter(f_9); destination(d_3); };

### MAIL LOG  -  This logs

filter f_12 {
        facility(mail) and level(info..emerg);
};

destination d_5 {
        file("/var/log/maillog" create_dirs(yes));
};

log { source(local); filter(f_12); destination(d_5); };

### PHONE DACS LOGS - This also logs

filter f_40 {
                level(debug..emerg) and host("172.12.67.28");
};

destination d_60 {
                file("/var/log/dacs/ftldgaaw_dac_1.log" create_dirs(yes));
};

log{ source(local); filter(f_40); destination(d_60); };

### ROUTER LOG - This does NOT log

filter f_19 {
                host("192.168.1.128");
};

destination d_19 {
                file("/var/log/netrouter_pisst.log" create_dirs(yes));
};

log{ source(local); filter(f_19); destination(d_19); };





More information about the syslog-ng mailing list