[syslog-ng] organizig multiple events from one server

["Rune V. Sjøen"]

Gustavo Soares wrote:
> Hi!!
> 
> I hope anyone can help me...
> 
> I would like know how can I organize multiple events coming
> from differents application servers instances installed on just one 
> physical
> server.
> Each instance is binding a different ip address.
> 
> I´ve set up syslog to create a dir with the host name, but the events 
> arrive
> with the same ip and not the ip address, which the app is binding and
> because of that sometimes I can´t distinguish which message belongs to
> a specific instance. Maybe I could use differents facilitys to try to
> organize things
> better, but then people would have to know which facility corresponds to
> which application.
> 
> The events are sent using log4j (syslog appender).
> 
> I hope, I´ve made myself clear...
> 
> Cheers,
> Gustavo
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> 

Maybe you could separate them by creating filters that filter by program 
name ?

http://wiki.egee-see.org/index.php/SyslogNG#Program_Filters