[syslog-ng] Logging a file to another syslog-ng server for indexing

Andrej Ricnik-Bay andrej.groups at gmail.com
Mon May 14 23:14:11 CEST 2007


On 5/15/07, Corey Bobb <cbobb at cygnus.com> wrote:
> What has to happen is from 1 server the log file gets read/moved over
> to the other Log server . . .which will then be indexed by splunk.  I am
> learning syslog-ng and am not sure exactly how to make what I am trying
> to do work.
Something like this?
log {
        source(src);
        filter(status);
        destination(loghost);
};

Note that you can have more than one log target for one source/filter.


> Corey M. Bobb
Cheers,
Andrej


More information about the syslog-ng mailing list