[syslog-ng] More then one application on same server

[ashish talati]

  Hi,
  below are the few logs generated in my local machine.
  In that first 2 logs are generated through one application and last log generated through second application. But as you can see all logs have the originating source as the pc196070/pc196070 which is the last 5 digits of my machine's ip address. I want to differentiate the logs coming from different application!! How can it possible?? ..You suggest me program filter...So is that a solution??...if yes then please let me know how to use it exactly...I am blank in how to use it..
   
   05/Apr/2007 11:18:36        pc196070/pc196070      DEBUG: - [Thread-  62/Client-0] Response: RESP:0;
   
  05/Apr/2007 11:18:36       pc196070/pc196070       Thread-62/Client-0] received: Enter command   
   
  05/Apr/2007 11:18:36    pc196070/pc196070       INFO: -NpiListener.Listener - Port 12346 successfully opened. Waiting for connecti...        
   
  Thank you.
  B.R.
  Ash.
   
    
---------------------------------
  From: syslog-ng-bounces at lists.balabit.hu on behalf of Geller, Sandor (IT)
Sent: Wed 4/4/2007 11:37 AM
To: Syslog-ng users' and developers' mailing list
Subject: RE: [syslog-ng] More then one application on same server



    > Hi,
> Thank you very much for your reply.
> But as I am new in this so can you please be more specific
> that how can I use the Program() filter??
> Let me again tell you my specific issue- I have a Tomcat
> server running and in that server I have 3 application or
> nodes that generates the logs and dump into tomcat
> server....Now when I use the syslog it gives me all the logs
> mix with the generating source name as the hostname (tomcat
> server)....but I want that syslog should give me the logs
> which has the field in it from which I can identify that this
> log is generated in this application and this is in other...
> So I hope  I describe the problem to give you exact idea!!
> I will be thankful to you if you help me in this.

Could you show some lines from your log originating from
different programs? I'm not familiar with tomcat, so I
don't understand your issue exactly...

Maybe the logs have a field which could be used to
differentiate between your tomcat apps.

Regards,

Sandor
--------------------------------------------------------

NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.
_______________________________________________
syslog-ng maillist  -  syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html



 				
---------------------------------
 Here’s a new way to find what you're looking for - Yahoo! Answers 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20070409/bd377178/attachment.html