[syslog-ng] Newbie Looking for Help

[Mark R. White]

Nate, 

Will this syntax work? 

Mark

#Destinations

destination corppix {
        file ("/var/log/network/corppix/"
        owner (root) group (root) perm (0655) dir_perm (0755)); };

#Netmask Section - To log by device IP.

log {
        netmask("10.10.10.2");
        src (src);
        destination(corppix);
}; 

-----Original Message-----
From: syslog-ng-bounces at lists.balabit.hu
[mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Nate Campi
Sent: Thursday, May 11, 2006 8:13 PM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] Newbie Looking for Help

On Thu, May 11, 2006 at 06:54:16PM -0400, Mark R. White wrote:
> 
> I want to setup a syslog-ng server to do syslogging for my network.  
> So far it's easy, the part I'm having trouble with, and I'm not even 
> sure if it's possible, is I want to log by device to it's own individual
syslog file.
> Hence the reason for using syslog-ng vice sysklogd, I think the syntax 
> would be something as follows, but I could be way off base.

Use something like this:

 http://www.campin.net/newlogcheck.html#syslog-ng

> I also don't understand where to define the facilities as I did in 
> standard syslog.  Any help would be greatly appreciated.  One other 
> quick question, when I do a default install of syslog-ng (on Debian 
> Etch), it automatically logs to the tty.  Is this correct for all 
> versions, and whether it is or it's not, how do I stop it?
 
Comment out the sources and destinations that mention console or tty (names
like xconsole and du_all I think). I get dropped messages stats lines when I
keep that default debian console/tty stuff enabled.

Not logging to consoles or tty's speeds things up, see:

 http://www.campin.net/syslog-ng/faq.html#perf

--
Nate

"Get your facts first, and then you can distort them as much as you please."
- Samuel Clemens

_______________________________________________
syslog-ng maillist  -  syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html